last executing test programs: 8.11500916s ago: executing program 0 (id=543): r0 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@enum={0x1, 0x2, 0x0, 0x6, 0x4, [{0x8, 0x5}, {0x8, 0x3}]}, @var={0x5, 0x0, 0x0, 0xe, 0x4}]}}, 0x0, 0x46, 0x0, 0x0, 0x0, 0x10000, @value=r0}, 0x28) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYRESOCT], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001b00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$inet6_IPV6_RTHDR(r5, 0x29, 0x39, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f0000000100)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="016f0800010027000000140000004600003f00000000008490783fffff20ac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ba00030090780018d58838068b91e685d6"], 0xfd6c) 7.751322876s ago: executing program 0 (id=545): r0 = socket(0x10, 0x80003, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000100)={r3, r4/1000+60000}, 0x10) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r6 = epoll_create1(0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000040)={0xc}) epoll_wait(r7, &(0x7f0000000080)=[{}], 0x1, 0xe643) r8 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r8, &(0x7f0000000000)={&(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000290000003b0000000000000000000000280000000000000029000000050000000002020100000000fe8000000000000000000000000000bb005378536b7c6463e3"], 0x40}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_netdev_private(r9, 0x89b0, &(0x7f0000000040)="182e4d3a") unshare(0x66000500) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) ioctl$TUNSETOFFLOAD(r10, 0x4004743d, 0xc) close(r2) write$cgroup_type(r5, &(0x7f0000000280), 0x9) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000010000100000000007c0000000000000a64000000060a0b0400000000000000000200000038000480340001800c0001007061796c6f6164002400028008000340100000000800024000000000080001400000001508000440000000020900010073797a30000000000900020073797a32"], 0x8c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xc}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "00000000000000000001000f0e00"}}}]}, 0x48}}, 0x0) unshare(0x40000000) 6.923410427s ago: executing program 4 (id=548): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000005"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bridge0\x00', 0x0}) sendto$packet(r2, &(0x7f00000000c0)="3f031c000302140006001e0089e9", 0xe, 0x1000000000000000, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 6.814363311s ago: executing program 3 (id=549): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000d00)="d8000000140081044e81f782db44b9040a87080211000000040000a118000200e000000000000e1208000f0100810401a80016ea1f000940032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (async) r0 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000280)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="e06921e8682d85ff9782762f86dd", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x4, 0x5, 0x2, 0x4038a09, 0x4, @empty, @mcast2={0xff, 0x5}, 0x0, 0x0, 0x0, 0x5}}) (async, rerun: 32) unshare(0x6a040000) (async, rerun: 32) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r3 = socket$isdn_base(0x22, 0x3, 0x0) (rerun: 32) ioctl$IMSETDEVNAME(r3, 0x80184947, &(0x7f0000000000)={0xe, 'syz1\x00'}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000098fe201a488c8f0000000001"], 0x48) (async) unshare(0x600) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}, {&(0x7f0000000f00)="233c31ccb8e4e76dab86ba35abc663d03fd3e186dff919913f0c2e132f511da468fbb1ec89be31f6a1018b5535fde8ebbf1d21f003c87c3f58f0c7a66af4bc103f13d722e6c2a8dfac14c886e200d67eed58ddb50e9d365aaf08270d6d44e54f467a8e3efe1ef4c241312b1add134c8d3ae106f8a17f5a44ddceb4bc2866449e962792f624cefb2ad2c7b714e5047c0eaecbd04a15c8073cdf", 0x99}, {&(0x7f0000000fc0)="814d9d84fd89c1ea4a7019babb51989f25d95af73d7f63730804b7294048185bc7b6727997cd4ca27fb489780fbb07ab995dadffa899b45049af9e268ac1fa594b3b652431a33f9eebb8e58fc69bb2a7c3ebfc20d9d8f2bddf3200b93610d1a3af28b176c421e1b221ab569cc8b347c4a6625941611d1b1bdfbdd87da6405ae5ec8485b8c4baeaf13b498ce33e3d50e1fa20a8fee35fccf02c136ceabf49f9b8cb7f168c206c169eb7208d018eb26a115f513a6b13b79235d884003f98992c790a1ff0b5b992eb1f9e657ee567a6c1068becd1c3c37d3c649c474161b67d733065e4407117e3f5084f66a024034a", 0xee}], 0x3}, 0x4) (async, rerun: 32) r6 = socket$rxrpc(0x21, 0x2, 0x2) (rerun: 32) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000500)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0x3961, @remote, 0x6}}, 0x24) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f00000000c0)={0x0, 0x8, &(0x7f0000000100)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0xffffffffffffff55}, {&(0x7f0000000b00)="7a726cf5c8d0303533e5472b11a9bd3141e4ccbbbdb1e2ae3ca2e3e07d5b141ffb4d2d58976be8ab6cc27229a3f0529b68d5cee84f6181905b8dc10586675d801da7ef65bf66c12644676587f056c75a940d94ef4212bcb394dfe1127ffbabd43aaf515f4621ce2c3ab9d872a48dac34d4ee29e629c1e3b0d8a75ee17b9bc553d377fa09e4b7ab6fd789eca895e3ed9680d879d4eeffd162ec049177c7f9dfe91305f3953995d32bb6d8bf55f47a170fb46a92c9adfe43b2e7f057e13ef6d13e408aaeb8c8a7f72d764918a435acf97dc61dc4854f597949b8e645af02787f5eb59d3d"}, {&(0x7f0000000e00)="18b1843cf0de3aa49342e857e1af0cf6b9de7e7f8dde7337c1d55e49226cf43c41044b062c248aa8140157c520c9be6c21be465191990b2ed993358a1b41915f5f038cbcce434732fe0b51b5954b837d97ae986d6b0b2ca364c8e33fea5433662b81da7250640e14270dee4f15fd8486f580fd72847dd4c4e2e92e6f1516d465a862992e306fbc2b1a7ad9e4482a1f42148a2b5a5a996e4ee19b4ad26bef160ec94c99f2b71706f3ea5cc7c480e25635824f0df2a7768547eaa7f589cca84bf8047dcbed289e087b0f004cc643a02c2d10828cb28c16936a17cabba89cd9cff7ea449e3f5d3d2c690cbb05b0"}], 0x1, 0x0, 0x0, 0x1f000801}, 0x840) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r8, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) (async) r9 = socket$inet6(0xa, 0x3, 0x7f) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000c00)={{{@in=@dev={0xac, 0x14, 0x14, 0x2e}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x200000000, 0x40000000007, 0x20000a0de, 0x40000000000004, 0x2, 0x200000003, 0x400}, {0x40000000000005, 0x0, 0x0, 0x5}, 0x4, 0x0, 0x1}, {{@in=@empty, 0x4d4, 0x6c}, 0xa, @in6=@local, 0x3501, 0x1, 0x8, 0x0, 0x9075, 0x0, 0x1000}}, 0xe8) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x4}}}, 0x1c) (async, rerun: 32) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, &(0x7f00000003c0)=""/83, &(0x7f0000000700)="6adcd3da9edb59240e8971b926ae7c19a8db884ccf7520c146ca6edb19f42d4968f43cd7a91f6ba3cfc2d4a4928cbf8fa0c9f5f856fa20b0f68eb27fdd7c1987a97ad1f49baa2def4f0c06178e846da8145f985c8c28e09877a6f224ff9052f2fd6ba0391e6ae51fe41d0fc111df8c4333c19c132d90d1610bb045ea7c38a353c2d06655128be785752e4518a82b52f9f23742a5749068ae02488e040554", &(0x7f0000000600)="d8b8554e0d1c686676f67bbefb4ee16c42942a8c43e0c658346dc9986923ceb17a2ef6127fde361aa8d16af81ded9ed06086bd48a6943f0e3993ab3e441b2b866b307d0d4e5acabed95342d9ce0f56481d96384ac6a0bd6dcbc7b3ceec14fa41bf168985127e0ec1bd704712757912095afc44cdde636606f69f55e83e43e019fa60dd8e6b9aa3087857dd2d1ed56f2e868a7c0b5bba892bf7fe2f37468c7fa01b9a318d20b26c3d407a933023079b751749ed22cf7fe6f6f5aa6d6b81504eae68dbfa27615014224736b18f102f2f060c1ca564f4c9beab26e0ec299942490f66bbe76d2c9c276c4e", 0x4, r4, 0x4}, 0x38) (async, rerun: 32) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00010a00000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB='\x00'/28], 0x50) r11 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(r11, &(0x7f0000000000), 0xffffff6a) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x1c, &(0x7f00000008c0)=ANY=[@ANYBLOB="1808000000800000000000000000000018110000c2c5e51c2863965c561f075019ffe67e2dfd60d52153417e9e0e3944ca0591c0900e24635a457a5db9f29378867dac65464fca67dbfc3aeea9f790915c5174c3b0cc5b72e4650b965399b26fbf960a734bae5dc9a4518e101eab52e01c2fd504483674d6a1ae21dd802c5f66b4a2f632ba471e2be52cc5ec00a8990300747547d714854a16c9ff4a16c3a3098ebfb06e316e0e1fc78fbed62e1d184dd48c22d3da0882e52296a6e599518eaaac1fcf05aa99", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca9000000001f0035090100000000009500000000000000b700000000632af8ff00000000b509000000000000db00080000000000bf8611000000000005000000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018220000", @ANYRES32=r9, @ANYRES64=r11], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) mmap(&(0x7f000032e000/0x4000)=nil, 0x4000, 0x300000f, 0x80010, r6, 0x0) (async, rerun: 32) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r11, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x7f}, &(0x7f00000002c0)=0x8) (rerun: 32) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r11, 0x84, 0x1a, &(0x7f0000000840)={r12, 0x1c, "52bbbfcb6d626928e32a6c44a977602a2268d21ddb9873a0e690c97a"}, &(0x7f0000000880)=0x24) 6.668567877s ago: executing program 3 (id=550): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{}, "ff1f00dd40030002", "6798825ec73fc094fcd45c160968bcf3", "5417a1e6", "ee062705f7ea4bad"}, 0x28) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x8000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000040)=@generic={0x0, 0x90, 0x2}) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f00000004c0)={0x8400001d, 0x0, 0x0, 0xf2}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket(0x22, 0x2, 0x5) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r4) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r6, 0x84, 0x21, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000225bd7000fedbdf25550000000800010034000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000006, 0x11, r4, 0x3cd30000) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_ADD_COUNTERS(r7, 0x0, 0x41, &(0x7f00000000c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c70d16ea9fee21f1bac247fabda26b9a4f5ecb977108b86b220526d04"], 0x68) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ba20702500000000002003007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\b\x00\x00', &(0x7f0000000300)=""/8, 0x6c00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r9 = socket(0x8, 0x3, 0x0) connect$rxrpc(r9, &(0x7f0000000000)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e23, @empty}}, 0x24) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x30}}, 0x0) sendmsg$key(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0xe0}}, 0x200400c0) 6.38381413s ago: executing program 4 (id=553): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000540)=ANY=[@ANYRES32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x4, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000580)=[{r1}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r2, 0x0, 0x1843}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000040}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r4 = socket(0x840000000002, 0x3, 0x100) connect$inet(r4, &(0x7f00000005c0)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'gretap0\x00'}) r5 = socket(0x8000000010, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) write(r5, &(0x7f00000002c0)="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", 0xfc) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@map=r3, 0x2, 0x1, 0x8000ff, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) sendmsg$nl_route(r4, 0x0, 0x400c0) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, 0x0, 0xff00) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r7, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f0000000bc0)=[{&(0x7f0000000600)="db81628ac3c46ae78b710fea50ea285fc16a0d7fc63567e6c0ba4ff69da421f4dbbfc50538e38360c34974014d88ebaee3a8c848dea755f524207c5368400fa413c5f7d3c5f2c36c276ad91fcdeed78b6f71dbd295d7133d087188470b8739083f2a001efa4f330e714add28bcae8eba461e2b19aacafb4a7ad21f0cce403182f3b7", 0x82}, {&(0x7f0000000440)="0675249879332b7862d36b26cc44d29c3fcd566c203aaeea603524dd8ef2521dae6a6fca", 0x24}, {&(0x7f00000004c0)="12fe619cff46017ddee98d7a0ce3", 0xe}, {&(0x7f00000006c0)="4890491696a60da0c943a2882732e50bbd01ea8373b41c850496401b9514e065a2eec447863a451198832ace5a0066d0a02e2b8e8e6bcfa83b5b72580b0ba8cc34631b61bdcb3cb9d2cbaf47687b6fad45c2ffcc72a88c4a1eddc042f5aab68f60c1fd7fcbe5300a9dca8996ece71f71e305bb9181d6", 0x76}, {&(0x7f0000000740)="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", 0xfe}, {&(0x7f0000000a00)="3f45015b568cc9635a73a8489330dabd5858c00df3ed9b6112e38059cd262b3a0e08cbaccd74f97333c00499b194f3c13f6df42243ec9659b233f0a920175316656642d2d873db8615ae198e430936913d446d6759810987307205c189ea1d333e24653023006d0b5b957d082d555553e4e563c55fe8e9849b82591513a95084da55dfb059e340ef7d6ae90d5d9dc2a3d8d254f2a5099b673525e176d169cab88a3d7df0044543e1ad8514ea8921da7d4df71b11508d71d58cf2211faef42c02bfbe6f41c088f3d7fb37531d9fef1ee6fa2a13f62e6ad0170ed0dd75bcbbc64341e34ede2dd62465824250236085dd63", 0xf0}, {&(0x7f0000000c40)="e677af8da5e921b7c5e15f28e583af89445db97c8dc868a45ebb788eb3be9a46682bf6baf4f1e8df78f1cf8b4d16646469da2850b7c2d0afbd129ff2db8276833b5a1336f940a56991e3cf71b3043418aab2a3ad94d97d1821b4bde1dcad524e6244bc7896189685d6fb428367bb", 0x6e}], 0x7) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000500)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000000000000002000000000300000085120000b00001009500000000000000eab1055a493cb421"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 5.4890578s ago: executing program 0 (id=556): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfe, 0x0, 0xfd, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_DST={0x8, 0x2, @rand_addr=0x64010100}}]}, 0x30}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x6a401, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) ioctl$TUNSETPERSIST(r1, 0x400454c9, 0x1) ioctl$TUNSETLINK(r1, 0x400454cd, 0x339) 5.422986184s ago: executing program 4 (id=557): r0 = socket(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000400000002000000000a000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x439, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1040, 0x44100}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x81}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}]}}}]}, 0x48}}, 0x4040000) 3.826391163s ago: executing program 4 (id=558): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000007c0)='T', 0x1}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x2c, r2, 0x1, 0x72bd29, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x4}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4004040) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r5, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r7, 0x27, 0x28, 0x0, &(0x7f0000000580)="f8ad48cc02cb29dcc8007f5b86dd", 0x0, 0x3, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) write$cgroup_int(r6, &(0x7f0000000000), 0xffffff6a) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c80)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x80000, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x7ea}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xfffff800, 0x40, 0x1, 0x3, 0x80000001}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) sendmmsg(r8, 0x0, 0x0, 0x0) sendfile(r5, r6, 0x0, 0xfffffffeffd) write$tun(r6, &(0x7f0000000180)=ANY=[@ANYBLOB="bf9b5b214313cfce4bf8513f39623b7d3b4d9f47768b5c5f0e5489"], 0x1b) recvmmsg(r5, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000b00)=""/225, 0xe1}], 0x1}, 0xffffffff}], 0x1, 0x0, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f00000001c0)=0x3) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x2000, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x10, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_TIMER_SLACK={0x8, 0xd, 0xfffffffe}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x200, 0x2, 0x1}}, {0x4}}]}]}, 0x5c}}, 0x4000010) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x3c, r0, 0x1, 0x170bd25, 0x25dfdbfe, {0x39}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73, 0x1}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4004810) 3.752265956s ago: executing program 0 (id=560): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delsa={0x44, 0x12, 0x1, 0x0, 0x0, {@in=@dev}, [@srcaddr={0x14, 0xd, @in6=@rand_addr=' \x01\x00'}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4}]}, 0x44}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r2}, 0x10) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x190, 0x5230}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_SELECT={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x0) 3.699516085s ago: executing program 1 (id=561): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) socket(0x40000000015, 0x5, 0x0) (async) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) (async) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) select(0x40, &(0x7f0000000180)={0x9532, 0x0, 0x40, 0x315, 0x6, 0x6c7, 0xfa, 0x4}, &(0x7f0000000200)={0x6, 0x9, 0xff, 0x1000, 0x0, 0x2, 0x4, 0x9}, &(0x7f0000000240)={0x0, 0xa, 0xfffffffffffffffb, 0xffffffff, 0x5, 0xf7da, 0xff, 0x8}, &(0x7f00000003c0)={0x0, 0x2710}) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000440)="67d8908a807d9e246743bff362e38a733b2400aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c14498396b28c7d1784d04aa38922721cb78160", 0x5e}, {&(0x7f0000000900)="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", 0x423}], 0x2, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000440)="67d8908a807d9e246743bff362e38a733b2400aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c14498396b28c7d1784d04aa38922721cb78160", 0x5e}, {&(0x7f0000000900)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df895d9907e4afb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903279dbf426b39c3603c49049980767e31edb997f59785184cbd7b907e0974f1073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf4dee8512f3bac440f5d5e4bed6b897608b01eae26a54433e5f5c74a2ee3c2fc50067be05a677ff52a7dba7010830b879a41b579d44158fb89ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe9530547201664db91cf1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe01740ae4f19b5204ca305b1666b0c2a7e5015d6d530995843adfbac3954306d4cd82257d4d2c3283d45dbae43548fedb679328f114f7c8238ac955391b24614d91be1701ae07c170a9c299fcf3d0ac4cea07e88fbf66b697883af17a06ac3f9954eb2fbd20f101802cd023fc48c5d464c16059cc9dce8558c5322ac7612db0e27252804059094a318c4cdeeddd5793a427628c2c41a21f0d2f3962e32f710bf9e216ff1694e8d88c8a81328744b36d9ef9f08c0ea3ccd4f8729e2f00a048162834a958df39f9c5a8c8e876a52816446d0106f4a81dba144c80fda0b401f0774edbf73b3de44c4ca5c28b0830910f3", 0x423}], 0x2, 0x0, 0x0, 0x1}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0xb78}}, 0x40) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x8200, 0x8, 0x8f2, 0x0}, &(0x7f0000000040)=0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x5, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x5, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0900000004000000060000000000010042000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000500100000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000002060101000000000000000000000000050005000a000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e65740000000048225137a8016a1dcbe2e88b61a93149b574bc416dc82d1a595a42ba836857b98ad1e470e03f8e6f26255b72044124bafb57cc2269453cd65d849278e7c2137be7c4d4f277eb375149cd158e7a0d5894da5fad30819f"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r4, 0x8010661b, &(0x7f0000000340)) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0x68, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0x4}, {}, {0xb, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x3c, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0x3, 0xa, 0x1, 0xed8, 0x7, 0x8c, 0x40, 0x925e, [{0x101, 0x6, 0x200, 0x3}]}}, @TCA_U32_INDEV={0x14, 0x8, 'nr0\x00'}]}}]}, 0x68}}, 0x20040054) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x2, @any, 0x0, 0x2}, 0xe) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000000306010200000000008000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000140)={r2, 0xfff1}, 0x8) (async) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000140)={r2, 0xfff1}, 0x8) socket$inet_sctp(0x2, 0x5, 0x84) (async) socket$inet_sctp(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xb, &(0x7f00000002c0)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @exit, @call={0x85, 0x0, 0x0, 0xc1}, @map_fd={0x18, 0x8, 0x1, 0x0, r0}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x5}, @jmp={0x5, 0x0, 0x3, 0x1, 0x7, 0x18, 0x1}], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.634471657s ago: executing program 3 (id=562): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000100)=0xfffffffc, 0x4) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000080)=0x7ff, 0x4) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="640000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800b00010067656e657665000020000280080001000100001a"], 0x64}}, 0x2000000) sendmsg$802154_raw(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x24, @short={0x2, 0x3, 0xfffe}}, 0x14, &(0x7f0000000100)={&(0x7f0000000180)="75a2d4982112a949ee2e774cd2ec49f12b4ec3185b5ac453702c6efb0aa89e5d05036bb15dd61e961328d4e6af521f38667f472caaa0ab0a623dc6d6903d8dc450bb38f29b2b2a80247718565e5da46b75282cffac1262d455464e2cf6d47490857b21860a8dcfd9c50744456d9565da176131b9e6699961d31bf82a8cf869d5506c30", 0x83}, 0x1, 0x0, 0x0, 0x4048001}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x4, 0x5, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0xa}, [@call={0x85, 0x0, 0x0, 0x87}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x6c, 0x10, 0x403, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0xff7f}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @mcast2}]}}}, @IFLA_LINK={0x8}]}, 0x6c}}, 0x0) 3.485644388s ago: executing program 0 (id=564): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x34, r0, 0x1, 0xfffffffd, 0x0, {0x3d}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x20004804) socket(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x8040480) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) syz_open_procfs$namespace(0x0, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) bind$phonet(r4, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x1c, r3, 0x400, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x13}, @void, @void}}}, 0x1c}}, 0x0) unshare(0x6a040000) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00000006000000020000000200000f0300000202000000010000000300000000000000000000000000000044942d000000000000000200000000000000000100000f010000000000000000000000000000008400002e", @ANYRES8], 0x0, 0x6a, 0x0, 0x1}, 0x28) 3.190510239s ago: executing program 1 (id=565): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000040)=ANY=[], 0x8) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000003280)=""/76, &(0x7f00000002c0)=0x4c) 2.998727286s ago: executing program 1 (id=567): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000340)="02", 0x1}], 0x1}}], 0x1, 0x8005) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000007c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100030010651fbe347b2c2b00000c00018008000100", @ANYRES16=r2], 0x20}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = accept(r1, 0x0, 0x0) sendmsg$inet_sctp(r4, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x804c040}, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="2000000069000b0000000000000000000000000000000000080001000100000014490467517a91b9589aa9e557d9b4410a0d335eaaa3ca1de8d7ee514d183eaf37d0096929d57d772dcfe3f5016a2d6b6f074b4d1a6fdb7fa62517bf4a3f3f1123d1c9fc3bb13a517f11f0cb6a0853dfd09e3fdf3535b0c9242191d4e076b97dec7a468abe32256b085eabad1f7ec5f732ceeee430aaff295fb6000000000000000000008b55522425e8f3a33dc055cae09e604cad490218001976ac479ef3be1dceab3c9172e4570f06d1d506ae30834df777176c9e92703d388778590e394223c3f0960e2768a61b97f505b44c9df2"], 0x20}}, 0x4000000) 2.83324519s ago: executing program 2 (id=568): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$sock_ifreq(r5, 0x89f0, &(0x7f0000000180)={'bond0\x00', @ifru_names='sit0\x00'}) r6 = socket$kcm(0x1e, 0x5, 0x0) recvmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x9, 0xfffffffffffffffc, 0x1, 0xfffffffffffffffe}, 0x40000120) r7 = socket$unix(0x1, 0x5, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r10 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r10, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r11 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r11, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r11, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) bind$tipc(r10, 0x0, 0x0) bind$tipc(r10, 0x0, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffc, {0x0, 0x0, 0x0, r9, {}, {0x2, 0xb}, {0x9, 0x6}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x6aa}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c0e9}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000003c00)) 2.741481157s ago: executing program 4 (id=569): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = accept(r0, &(0x7f00000007c0)=@x25={0x9, @remote}, &(0x7f0000000840)=0x80) sendmsg$key(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x2, 0x18, 0x6, 0x6, 0x4, 0x0, 0x70bd2b, 0x25dfdbfe, [@sadb_x_nat_t_type={0x1, 0x14, 0x73}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e23}]}, 0x20}}, 0xc000) r3 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000dc0)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0x98, 0xa, 0x148, 0x188, 0x60, 0x188, 0x2a8, 0x2a8, 0x188, 0x2a8, 0x3, 0x0, {[{{@ip={@local, @multicast1, 0xffffffff, 0x0, 'lo\x00', 'bond_slave_0\x00', {0xff}, {0xff}, 0x2, 0x3, 0x2}, 0x0, 0x70, 0x98, 0x0, {0x200003ae, 0x7f00}}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@ip={@local, @rand_addr=0x64010101, 0xff000000, 0xff, 'macvlan0\x00', 'veth0_virt_wifi\x00', {0xff}, {}, 0x88, 0x1, 0x2}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@addrtype={{0x30}, {0x100, 0x611, 0x0, 0x1}}, @inet=@rpfilter={{0x28}, {0xa}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x3fd, 0x7}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x280) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x6e0, 0x0, 0x540, 0x540, 0x540, 0x1d0, 0x610, 0x610, 0x610, 0x610, 0x610, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [0xffffffff, 0xff000000], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21}, 0x0, 0x188, 0x1d0, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2}}, @common=@inet=@multiport={{0x50}, {0x0, 0x0, [0x0, 0x80]}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@private=0xa000000, @ipv4=@empty, 0xa, 0x30, 0x1}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0x0, 0x0, 0xffffff00], [], '\x00', 'bond_slave_0\x00', {}, {}, 0x2f, 0x9}, 0x0, 0x168, 0x1a0, 0x48000000, {}, [@common=@ah={{0x30}, {[0x4d2, 0x4d3], 0xa000000, 0x4, 0x3}}, @common=@srh1={{0x90}, {0xc, 0x2, 0x4, 0x8, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}, @private1, @private0, [0xff, 0xff000000, 0x0, 0xff000000], [0xffffffff, 0xffffff00, 0x0, 0xff], [0xff000000, 0x0, 0x0, 0x80], 0x804, 0x400}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x6, 0x5}, {0xffffffffffffffff, 0x6, 0x1}, {0x0, 0x4, 0x2}, 0xfffffffe}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback, 0x0, 0xfe}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x740) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x4) write(r4, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) pipe(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000780)={'geneve1\x00', 0x1000}) 2.646540104s ago: executing program 1 (id=570): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_buf(r0, 0x0, 0x10, &(0x7f0000001d00)='/\'', 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x7, 0x1, 0x0, 0x6, {{0x5, 0x4, 0x2, 0x2d, 0x14, 0x64, 0x0, 0xe0, 0x2f, 0x0, @local, @empty}}}}) r1 = socket$netlink(0x10, 0x3, 0x15) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xts-twofish-avx,camellia-asm,cbcmac(aes))\x00'}, 0x58) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x2000009, 0x4d032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x204000) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0x0, 0x0, 0x20040890}, 0x200080c0) 2.633975158s ago: executing program 3 (id=571): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000780)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = accept(r0, &(0x7f00000003c0)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000140)=0x80) sendmmsg$alg(r2, &(0x7f00000000c0), 0x0, 0x40811) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/91, 0x5b}], 0x1}, 0x10101) setsockopt$MRT_DEL_MFC(r1, 0x0, 0xcd, &(0x7f0000000340)={@remote, @local, 0x0, "9bc82cd791512157123b9a737333c138546126c72e5c9bff9800", 0x10000008, 0x8, 0x0, 0x4}, 0x3c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc580000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000002c0003800c0000800800034000000002100000800c000180060001"], 0xbc}}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = accept$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f0000000100)=0x14) bind$packet(r5, &(0x7f0000000380)={0x11, 0x9dccfe2e1880d04d, 0x0, 0x1, 0x4}, 0x14) bind$netlink(r4, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000490}, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x64, 0x0, 0x1, 0x409, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x0, 0x1, 0x0, 0x1, @ipv6={{0x0, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x0, 0x4, @local}}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x0, 0x3, 0x1, 0x0, 0x7}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x64}}, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg(r7, &(0x7f0000004dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000004880)=[{0x10, 0x102, 0x4}, {0x10, 0x84, 0x35a8}], 0x20}, 0x4000000) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r2) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x50, r8, 0x20, 0x70bd26, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x80}, {0xc, 0x90, 0x9}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x20008801) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)={0xfc, 0x8017, 0x107, 0xfffffffe, 0x25dfdbfc, {0x1, 0x7c}, [@nested={0x4, 0x145}, @nested={0xc, 0x50, 0x0, 0x1, [@typed={0x8, 0x5a, 0x0, 0x0, @uid=0xee01}]}, @generic="cdec5ea3782fb13503405e697b99d458cc5ae4df074e52f6c300e2954ee76fe94e263dcad0821e73a79893e552d1cf25e48b10bf63609f3ceeb05ad605176526b0484f83f31b8692574f37f479c9b1fcacdf598afae2f84ad533df77d2ac2758158501a59434ce84d22ed97a1e2bdead1da28f9ba47ad8bb3f163766feaebfa3ed47f41b34f5cc12a0708f477e0930480292fe31eb8555362f75869819c03593471ba3bcdc41ee64a6cf3c80f784b20b6bd3fdd8d5b395659f1127d817a4293af39870ba0700834606aa5a63adacce872c786ac387c1"]}, 0xfc}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f00000000c0)={0x1, 'ip_vti0\x00', 0x2}, 0x18) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = accept$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000680)=0x14) bind$packet(r11, &(0x7f0000000740)={0x11, 0x1c, r6, 0x1, 0x3}, 0x14) r12 = syz_genetlink_get_family_id$nfc(&(0x7f00000004c0), r10) sendmsg$NFC_CMD_ENABLE_SE(r10, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x1c, r12, 0x1, 0x70bd28, 0x35dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x71eff8d2059dfe60}, 0xc004) sendmsg$kcm(r1, &(0x7f0000001280)={&(0x7f0000000a80)=@un=@abs={0x1, 0x0, 0x4e21}, 0x80, &(0x7f0000001100)=[{&(0x7f0000000b00)="00c37bf62c772b39fffb4004f92167bc4dde25757b989b3cb71d6b2d7fb556fb1f38b1ae90173636c745e309dd0840f5cc939a2212d2c602a06e14ea58d66e042e3a81a4e75918975081411738ffa269b0f3d3e87343fddca233f48617dfa00d2adb6c4e9640313cbc0226bbb5b54d97b4187beb27ecf0457f6b0947b5298da42fd7a63e5e0260ad595a927916fcbf6f0ab79ebd37250aa2c3c54bc3", 0x9c}, {&(0x7f0000000bc0)="7420d54f144dfc0b22638cc6207a85233889a164f956205339be2bb0c9e23b6c13f5dc51c9d9ef733968ef77a9a21a294b3e7777e6aff1a6a8440e7d0d102f8a7693dec49411155e8a4218390ccd4c7fe0a9ca2c2864c62a766d498daa156db82e5ce8827f6e246d7579a322acaa9a91dd9f41270326bc971ad7dc95ea7ad3ec848611158e344cfa226f2ac69a78aa40977daaf627acf8cd7ee1644c8118df22587f5de8b1c6f5cb1e990cbcb20da5b0f3b554e3", 0xb4}, {&(0x7f0000000c80)="c080f302a9945a11c170cfc20ecc46c14ac071c99c44b562b6893be450fdf375b83f2a4c167dfffea287a7dd485567545980e39717b85da3d2c6813f8a31d2242508745267b36e620a24a74eb109ffd4b107304b2f6abf40089ac53b76c333e9487e00a0384b2510a73d828943fcb46c2a38aaec1fa4c33f", 0x78}, {&(0x7f0000000d00)="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", 0xfd}, {&(0x7f0000000e00)="fe746ae8a4b2aaa4b434d4ce50e48077a4955869258ed3ebdd6398bc1d165b9cb0e4332c9655670966b3aba13a06d8c55bb57939654f321db5d56176ca11e658e415b6c3333bba36e23aff17168053f0bd8c8873fa", 0x55}, {&(0x7f0000000e80)="54dbe0ceb35c344a276dc4e07a60f70546df302acad0b3acffe521124a00e8c6974cded82d7b4d8263cb13aa7857d00cb19f925aabaf0a81d66864af88d616687a71728d52f7e0f3de3371cde9a1889c101e8176a145541f64836cd55e046d2ca3776fc63aa3db81b7143fd8e2a78ce3d08e6fd3a89873cc03f3c750f24cf007abaa8f143fbf5c56e4dd3fea4b6baf773449c4b073819b7d2547", 0x9a}, {&(0x7f0000000f40)="bd231dd66888a901e98a17c52f7d81bca44f5198a45ceba2fb4f3a9d53dcbe42259542bc6c9178a11765bf02d6687d8e2e02265390d1fbc741bea94dbae408dd9d85b339d172ecaad5cc133c1fe96381e350d35500fb721e0893709be0c922ee6ce6a65687fe3e68b67daaea235169ee8b26731c15398720976e5b452ef97784bf7be790c166c2e2b9db54d83c3f4ee1dbef9dad88f4", 0x96}, {&(0x7f0000001000)="fb68e106ab15a6848942298d48ffb8bf1acd305aef06d034b349a62efb848325a76708cd082880e16a5bbb0a5edb966f80a5306170e27b0c63ac3d2f250a6af2da7f309b62203ba6cb8160be81ef8140ec5cc38e0f28edb8a4b4ce9d6ba956f0768ca1f430c79c0be6e37ed7ff867e82cf90b5aeab5fe3999a0014f2629406d7ab77aaa644a62d3c295da78c299cdf1117913bf87a0a153d138dc52bfb5d1fa31768a37361533903b8b890f343e2c7825939e07206e0b931d7a9857f1bd33add4bff9d49234e888664772f43016f1a7b5e91e505c96ed598109ada2b564f22e82e2240", 0xe3}], 0x8, &(0x7f0000001180)=[{0x30, 0x111, 0x8, "40795a8fccebc8e29a3b63a1c8ba7f370a5275a49e13f9a4720ffebec81c3b"}, {0x90, 0x1, 0x5, "29a55e7f0bb0d759b8cee9e259ce072487fdaee0b86fced5cdad838978e6b03aeb3428ab4a1c808a5174bbe363d3faf81b075285b7753e4a4345db780cb37d20f3192d9f8bc1c2c4273e98fe04211f26412bbda037e455c012c21a6825a7f602004da1cbd2a2331421840a6350c53e7884b89d37e159638cea7e274d"}, {0x18, 0x107, 0x9af, 'Hm'}], 0xd8}, 0x4081) 1.985141716s ago: executing program 4 (id=572): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x2b, 0x80801, 0x1) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) unshare(0x6a040000) (async) socket$rxrpc(0x21, 0x2, 0x2) (async) bind$rose(0xffffffffffffffff, &(0x7f0000000000)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x1, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) (async) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) (async) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000240)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18) (async) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2}}}}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'pim6reg1\x00', 0x20}) (async) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000095001e00"/24], &(0x7f0000000000)='syzkaller\x00'}, 0x90) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000003ec0)={0x1, [{r3, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {0x0, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {0x0, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r4}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r4}, {r4, r5}, {r4, r5}, {0x0, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r4}, {r4, r5}, {r4, r5}, {0x0, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {0x0, r5}, {r4, r5}, {r4}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r4}, {r4, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r3}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r4}, {r3, r5}, {r4, r5}, {r3, r5}, {r4}, {0x0, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r4}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r3}, {r4, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r3, r5}], 0x7, "3113d84c0ab819"}) (async) r6 = socket(0x8, 0x3, 0x0) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r7, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x14, 0x1, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x841}, 0x4000) ioctl$IMGETCOUNT(r6, 0x61d8, &(0x7f0000000000)) (async) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)={0x1c, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @u32=0x400}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg(r8, &(0x7f0000004ac0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x88, 0x10f, 0x0, "2f26bdac3266bdbded9a6ffd98bfdd90a56f4c4242efc3e3edee51425443d96baa73a9e9428056c71fd63a2f528d0ed8a00f0ceb890a608c65758050117c39fd1c73ed7e411a7a26e564ce4dd14eeb4fcdc7a25a7bfe43241b275d371a45efe43762cc9cd11524214a7ad23b2335eefad4"}, {0x10, 0x10f, 0x2}], 0x98}}], 0x2, 0x0) 1.902315784s ago: executing program 3 (id=573): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0], 0x5c}, 0x1, 0x0, 0x0, 0x22004004}, 0x4000040) (async) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0000000800000000040000001e97ac9e1eb926175851b814d6277369cedbd7d019afe8ac9945c086b2f300000000c507f5530f82378ee575ad1c2d6bde06bdae8eac95e328c0a032", @ANYRES32=0x0, @ANYBLOB="7f15000000000000140012800b0001006261746164760000040002800a000100bbbbbbbbbbbb0000"], 0x40}}, 0x20000840) (async) r3 = socket(0x10, 0x3, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYRES8=r6, @ANYRESDEC], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) (async) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) (async) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e22, @multicast2}, 0x10) (async) sendmmsg(r9, &(0x7f0000007fc0), 0x800001d, 0x1c) (async) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c", @ANYRES32, @ANYBLOB, @ANYRES16=r5], 0x40}}, 0x80) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="050000000800000000e0fc463cd1fb569607b50a0000000c000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000600)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r11 = accept4(r10, 0x0, 0x0, 0x80800) setsockopt$sock_int(r11, 0x1, 0x21, &(0x7f0000000940)=0x8, 0x4) (async) sendmmsg$alg(r11, &(0x7f0000001a80)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0x122}], 0x3, &(0x7f0000000680)=[@assoc={0x0, 0x117, 0x4, 0x7}], 0xc0, 0x1}, {0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000980)="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"}, {&(0x7f0000001980)="1e0424d90ac542ceffdff266707dbd1fecb91a70959b275b87beb76b2993af28b0f1050a2d9dd5319abe9cffd57b700d1e20b7e2f9ff7d1ffff1ed7761adb3affcdcc1c512314347856da4c6869a73a7922eadc559a1a96db3def8b5b075fb170643dabfb721f2ba81353e67fc050fba6d05e43cd9adba374682406a1eacf0dfa406ecfe9f207fb2d4063c412144b7e63b41f51533ccfd532426940e9ccf93b872aad199bc"}], 0x0, &(0x7f0000001a40)=[@assoc={0x0, 0x117, 0x4, 0x420}], 0x0, 0x24044004}], 0x1, 0x40800) (async) recvmsg(r11, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) 1.788501393s ago: executing program 2 (id=574): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="34000000b519d359ae3c26de1da2d2322135d2e6a661fca2a576823ecdb7775692d39f9ee3a54d212ef32c8cd63099fce1b6ffb1e41c720d3e129786dce9135dbdf27a9a6696b3f4e668f80a6cb83b1acfec26fcaca88c840aa438977d8d10ce", @ANYRES16=r1, @ANYBLOB="070607bd7002fddbdf252d00000008002f00000000000a0001007770616e310000000c0005000203aaaaaaaaaaaa"], 0x34}}, 0x4008400) 1.710908277s ago: executing program 3 (id=575): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) listen(0xffffffffffffffff, 0x2) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r0, 0x2) socket(0x8, 0x3, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r5, 0x8}, &(0x7f00000000c0)=0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b700000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000100)={0x1, 'bridge_slave_0\x00', {}, 0xfffe}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000008300), r8) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r8, &(0x7f0000008440)={0x0, 0x0, &(0x7f0000008400)={&(0x7f0000008340)={0x38, r9, 0x9, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x24, 0x7, 'system_u:object_r:crack_db_t:s0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$netlink(r7, 0x0, 0x40) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8, 0x80}, 0x0, 0x0) 1.49955228s ago: executing program 2 (id=576): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0900000005000000fd09000084"], 0x48) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, r1}, 0x38) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth1_to_batadv\x00'}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0\x00', &(0x7f0000000040)=@ethtool_test={0x1a, 0x8000, 0x81, 0x6, [0xe, 0xfffffffffffffffb, 0x8, 0xfffffffffffffffc, 0x6f40, 0xffffffffffffff00]}}) ioctl$AUTOFS_IOC_SETTIMEOUT(r1, 0x80049367, &(0x7f0000000000)=0xfff) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x52, &(0x7f00000003c0)={@local, @empty, @val={@void}, {@ipv4={0x6000, @tipc={{0x5, 0x4, 0x0, 0x1, 0x40, 0x68, 0x0, 0x0, 0x6, 0x0, @rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x1, 0xb}, 0x0, 0x2}}}}}}}}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000013c0)=ANY=[@ANYBLOB="40000000100001042abd70000020000000000000", @ANYRES32=0x0, @ANYBLOB="c683060098540b00200012800e00010069703665727370616e0000000c00028006000200ff"], 0x40}, 0x1, 0xd, 0x0, 0x480c5}, 0x44000) 1.234613453s ago: executing program 2 (id=577): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000040)=ANY=[], 0x8) getsockopt$inet6_opts(r0, 0x11, 0x3b, &(0x7f0000003280)=""/76, &(0x7f00000002c0)=0x4c) 1.234249601s ago: executing program 1 (id=578): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000200)=0x6, 0x4) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000180)=0x3, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000300)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x65, 0x0, 0x1, 0x88, 0x0, @remote, @broadcast}, {0xfdfe, 0x4e24, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "497a1d08fd3d0ee007022798bb6374ed840b4f36f41fc4d035e9ebe414aa958d", "4bbef5e4007d98221ab127439ea1315dd1d4988f1e2de8fdadd382b06f47ea42000000fffffffffffffefd00", "ef7c9d6a98e3943f6892078bb952854743fe4dddd2e7c0ce70a4ac7d", {"a004000000af17fe8bacbae2ab0b233d", "01422d05000000ab691206d021fb00"}}}}}}}, 0x0) 1.118979176s ago: executing program 2 (id=579): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000007c0)='T', 0x1}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x2c, r2, 0x1, 0x72bd29, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x4}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4004040) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r5, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r7, 0x27, 0x28, 0x0, &(0x7f0000000580)="f8ad48cc02cb29dcc8007f5b86dd", 0x0, 0x3, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) write$cgroup_int(r6, &(0x7f0000000000), 0xffffff6a) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c80)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x80000, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x7ea}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xfffff800, 0x40, 0x1, 0x3, 0x80000001}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) sendmmsg(r8, 0x0, 0x0, 0x0) sendfile(r5, r6, 0x0, 0xfffffffeffd) write$tun(r6, &(0x7f0000000180)=ANY=[@ANYBLOB="bf9b5b214313cfce4bf8513f39623b7d3b4d9f47768b5c5f0e5489"], 0x1b) recvmmsg(r5, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000b00)=""/225, 0xe1}], 0x1}, 0xffffffff}], 0x1, 0x0, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f00000001c0)=0x3) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x2000, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x10, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_TIMER_SLACK={0x8, 0xd, 0xfffffffe}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x200, 0x2, 0x1}}, {0x4}}]}]}, 0x5c}}, 0x4000010) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x3c, r0, 0x1, 0x170bd25, 0x25dfdbfe, {0x39}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73, 0x1}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4004810) 1.087542052s ago: executing program 1 (id=580): unshare(0x68040200) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "b4003a00"}, 0x28) shutdown(r0, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7000fddb1800000008000300", @ANYRES32=r5, @ANYBLOB="54003080500001802c0003800c0004000202aaaaaaaaaaaa06000300a3aa00000c0004000200aaaaaaaaaaaa06000100030000002000038006000100020000000c0004000200aaaaaaaaaaaa0800020003000000"], 0x70}, 0x1, 0x0, 0x0, 0x8041}, 0x8000) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r6 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@empty, @in=@broadcast, 0x0, 0x20, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x20005, 0x8, 0x5, 0x9, 0x0, 0x5}, {0x2, 0xfffffffffffffffc, 0xffffffffffffffff}, 0xc24, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@empty, 0x0, 0x32}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x100}}, 0xe8) connect$inet6(r6, &(0x7f0000000240)={0xa, 0x12, 0x0, @empty}, 0x1c) sendfile(r0, r1, 0x0, 0xffffffff004) sendmsg$NFQNL_MSG_CONFIG(r1, 0x0, 0x20000) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000080)) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x5, 0x2, 0x2}, 0x10) close(0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) 37.383392ms ago: executing program 0 (id=581): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd29, 0x25dfdbfe, {{@in6=@dev={0xfe, 0x80, '\x00', 0x17}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x3, 0x0, 0x2, 0xfffffffffffffffd}, {0x0, 0x800, 0x6}, 0x0, 0x0, 0x1, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x24008040}, 0x8000) syz_emit_ethernet(0x46, &(0x7f0000000400)={@local, @random="df00004000", @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, {[@ssrr={0x89, 0x7, 0xa2, [@broadcast]}, @cipso={0x86, 0x6, 0x1}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfdff}}}}}}, 0x0) 0s ago: executing program 2 (id=582): sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='p\x00@\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7000fedbdf250900000008000500be0000001400038005000800ff000000080001"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x5) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000340), 0x4) close(0x3) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd70000400000005000000080009000200000008000c000300000008000b00000000000600010007"], 0x40}}, 0x20) sendmsg$NL80211_CMD_GET_MPATH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000000048b0000000df08000334", @ANYRES32=0x0, @ANYBLOB='\f'], 0x34}}, 0x8080) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.187' (ED25519) to the list of known hosts. [ 80.387204][ T5815] cgroup: Unknown subsys name 'net' [ 80.518636][ T5815] cgroup: Unknown subsys name 'cpuset' [ 80.527856][ T5815] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.199047][ T5815] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.933368][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.942105][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.950505][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.958089][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.965832][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.973857][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.982699][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.990414][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.998208][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.005687][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.023915][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.031929][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.040685][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.048238][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.049193][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.064226][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.071552][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.072758][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.087658][ T5831] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.096118][ T5831] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.103387][ T5147] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 85.121085][ T5147] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 85.128850][ T5147] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 85.137025][ T5147] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 85.145099][ T5147] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 85.769059][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 85.910700][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 85.958125][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 86.068751][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 86.087880][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 86.152461][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.160007][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.168237][ T5844] bridge_slave_0: entered allmulticast mode [ 86.175830][ T5844] bridge_slave_0: entered promiscuous mode [ 86.184732][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.191865][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.199464][ T5844] bridge_slave_1: entered allmulticast mode [ 86.206829][ T5844] bridge_slave_1: entered promiscuous mode [ 86.305994][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.313195][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.321313][ T5836] bridge_slave_0: entered allmulticast mode [ 86.329083][ T5836] bridge_slave_0: entered promiscuous mode [ 86.374209][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.381590][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.390109][ T5836] bridge_slave_1: entered allmulticast mode [ 86.397465][ T5836] bridge_slave_1: entered promiscuous mode [ 86.407791][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.462363][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.471779][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.479637][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.487244][ T5833] bridge_slave_0: entered allmulticast mode [ 86.494431][ T5833] bridge_slave_0: entered promiscuous mode [ 86.555256][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.562459][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.570231][ T5833] bridge_slave_1: entered allmulticast mode [ 86.577945][ T5833] bridge_slave_1: entered promiscuous mode [ 86.626612][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.665242][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.672362][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.680085][ T5830] bridge_slave_0: entered allmulticast mode [ 86.687533][ T5830] bridge_slave_0: entered promiscuous mode [ 86.696026][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.703175][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.710449][ T5825] bridge_slave_0: entered allmulticast mode [ 86.717742][ T5825] bridge_slave_0: entered promiscuous mode [ 86.727869][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.739295][ T5844] team0: Port device team_slave_0 added [ 86.747784][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.757254][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.764394][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.771895][ T5830] bridge_slave_1: entered allmulticast mode [ 86.779422][ T5830] bridge_slave_1: entered promiscuous mode [ 86.786584][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.793774][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.801992][ T5825] bridge_slave_1: entered allmulticast mode [ 86.809403][ T5825] bridge_slave_1: entered promiscuous mode [ 86.830563][ T5844] team0: Port device team_slave_1 added [ 86.838526][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.928590][ T5833] team0: Port device team_slave_0 added [ 86.962414][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.991378][ T5836] team0: Port device team_slave_0 added [ 87.000643][ T5836] team0: Port device team_slave_1 added [ 87.027811][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.035133][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.062072][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.076688][ T5833] team0: Port device team_slave_1 added [ 87.103677][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.134293][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.164101][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.172343][ T5147] Bluetooth: hci0: command tx timeout [ 87.172425][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.178647][ T52] Bluetooth: hci3: command tx timeout [ 87.204280][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.205279][ T5828] Bluetooth: hci4: command tx timeout [ 87.214855][ T52] Bluetooth: hci1: command tx timeout [ 87.221508][ T5843] Bluetooth: hci2: command tx timeout [ 87.276224][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.313233][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.321246][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.347995][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.363051][ T5830] team0: Port device team_slave_0 added [ 87.382353][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.389536][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.415599][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.429448][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.436470][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.462475][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.474263][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.481417][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.507756][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.520652][ T5830] team0: Port device team_slave_1 added [ 87.541741][ T5825] team0: Port device team_slave_0 added [ 87.587346][ T5825] team0: Port device team_slave_1 added [ 87.655719][ T5844] hsr_slave_0: entered promiscuous mode [ 87.662175][ T5844] hsr_slave_1: entered promiscuous mode [ 87.694280][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.701486][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.727568][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.739827][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.747132][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.773502][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.786969][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.793947][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.820146][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.863402][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.870479][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.896945][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.920349][ T5836] hsr_slave_0: entered promiscuous mode [ 87.926820][ T5836] hsr_slave_1: entered promiscuous mode [ 87.933028][ T5836] debugfs: 'hsr0' already exists in 'hsr' [ 87.938959][ T5836] Cannot create hsr debugfs directory [ 87.950311][ T5833] hsr_slave_0: entered promiscuous mode [ 87.957666][ T5833] hsr_slave_1: entered promiscuous mode [ 87.963820][ T5833] debugfs: 'hsr0' already exists in 'hsr' [ 87.969811][ T5833] Cannot create hsr debugfs directory [ 88.153035][ T5825] hsr_slave_0: entered promiscuous mode [ 88.159515][ T5825] hsr_slave_1: entered promiscuous mode [ 88.165987][ T5825] debugfs: 'hsr0' already exists in 'hsr' [ 88.171736][ T5825] Cannot create hsr debugfs directory [ 88.196945][ T5830] hsr_slave_0: entered promiscuous mode [ 88.203530][ T5830] hsr_slave_1: entered promiscuous mode [ 88.210521][ T5830] debugfs: 'hsr0' already exists in 'hsr' [ 88.216326][ T5830] Cannot create hsr debugfs directory [ 88.718660][ T5833] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.737474][ T5833] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.757344][ T5833] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.768622][ T5833] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.831628][ T5825] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.842557][ T5825] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.871012][ T5825] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.881887][ T5825] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.968196][ T5844] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.992707][ T5844] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.004550][ T5844] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.017352][ T5844] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.120956][ T5836] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.147969][ T5836] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.158800][ T5836] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.176193][ T5836] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.226826][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.246062][ T5828] Bluetooth: hci1: command tx timeout [ 89.251535][ T5828] Bluetooth: hci3: command tx timeout [ 89.257867][ T5843] Bluetooth: hci4: command tx timeout [ 89.263302][ T5843] Bluetooth: hci2: command tx timeout [ 89.269112][ T5835] Bluetooth: hci0: command tx timeout [ 89.334363][ T5830] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 89.346556][ T5830] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 89.363364][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.376147][ T5830] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 89.387253][ T5830] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 89.402742][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.437434][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.444759][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.471406][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.489763][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.500497][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.507713][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.525411][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.532591][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.587385][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.594580][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.608516][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.622160][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.629461][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.682348][ T751] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.689562][ T751] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.834551][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.953755][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.981253][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.022150][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.069251][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.076499][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.141862][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.149208][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.180647][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.187900][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.254057][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.261264][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.342905][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.371344][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.458781][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.650119][ T5825] veth0_vlan: entered promiscuous mode [ 90.672115][ T5833] veth0_vlan: entered promiscuous mode [ 90.711118][ T5825] veth1_vlan: entered promiscuous mode [ 90.738279][ T5844] veth0_vlan: entered promiscuous mode [ 90.768688][ T5833] veth1_vlan: entered promiscuous mode [ 90.803868][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.829124][ T5844] veth1_vlan: entered promiscuous mode [ 90.878784][ T5825] veth0_macvtap: entered promiscuous mode [ 90.888778][ T5833] veth0_macvtap: entered promiscuous mode [ 90.899699][ T5833] veth1_macvtap: entered promiscuous mode [ 90.913087][ T5825] veth1_macvtap: entered promiscuous mode [ 90.952940][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.967070][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.003721][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.022175][ T5844] veth0_macvtap: entered promiscuous mode [ 91.032339][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.066267][ T5844] veth1_macvtap: entered promiscuous mode [ 91.076823][ T1166] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.087059][ T1166] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.126575][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.139117][ T1166] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.153896][ T5836] veth0_vlan: entered promiscuous mode [ 91.172686][ T1166] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.212501][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.228591][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.249889][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.262711][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.273596][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.307631][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.325727][ T5828] Bluetooth: hci4: command tx timeout [ 91.331199][ T5828] Bluetooth: hci3: command tx timeout [ 91.337064][ T5843] Bluetooth: hci2: command tx timeout [ 91.337111][ T5147] Bluetooth: hci1: command tx timeout [ 91.343280][ T5836] veth1_vlan: entered promiscuous mode [ 91.350210][ T5835] Bluetooth: hci0: command tx timeout [ 91.390866][ T1166] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.452498][ T1166] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.468141][ T1166] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.477648][ T1166] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.522248][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.531187][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.572273][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.592828][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.646745][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.657741][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.701475][ T5836] veth0_macvtap: entered promiscuous mode [ 91.733429][ T5836] veth1_macvtap: entered promiscuous mode [ 91.750783][ T5833] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 91.767238][ T1136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.773368][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.783485][ T1136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.791792][ T5830] veth0_vlan: entered promiscuous mode [ 91.848140][ T1166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.870541][ T1166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.899529][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.911119][ T5830] veth1_vlan: entered promiscuous mode [ 91.933883][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.953323][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.965276][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.977723][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.006016][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.021098][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.071897][ T10] cfg80211: failed to load regulatory.db [ 92.179962][ T5830] veth0_macvtap: entered promiscuous mode [ 92.249962][ T5830] veth1_macvtap: entered promiscuous mode [ 92.357989][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.391243][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.426825][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.427336][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.543443][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.552665][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.632634][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.649057][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.751697][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.773945][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.112776][ T751] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.156005][ T751] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.322790][ T751] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.354732][ T751] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.405269][ T5835] Bluetooth: hci0: command tx timeout [ 93.410769][ T5835] Bluetooth: hci1: command tx timeout [ 93.416945][ T5147] Bluetooth: hci3: command tx timeout [ 93.422400][ T5147] Bluetooth: hci2: command tx timeout [ 93.427905][ T52] Bluetooth: hci4: command tx timeout [ 93.663979][ T5996] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15'. [ 93.874900][ T6006] Zero length message leads to an empty skb [ 93.934430][ T6010] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 94.364255][ T6023] netlink: 12 bytes leftover after parsing attributes in process `syz.3.22'. [ 95.035983][ T6056] netlink: 12 bytes leftover after parsing attributes in process `syz.1.29'. [ 95.045334][ T6054] netlink: 'syz.3.26': attribute type 21 has an invalid length. [ 95.053044][ T6054] IPv6: NLM_F_CREATE should be specified when creating new route [ 95.104496][ T6054] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 95.112002][ T6054] IPv6: NLM_F_CREATE should be set when creating new route [ 95.119343][ T6054] IPv6: NLM_F_CREATE should be set when creating new route [ 95.126622][ T6054] IPv6: NLM_F_CREATE should be set when creating new route [ 95.356430][ T10] IPVS: starting estimator thread 0... [ 95.362674][ T6062] netlink: 20 bytes leftover after parsing attributes in process `syz.4.30'. [ 95.465653][ T6066] IPVS: using max 24 ests per chain, 57600 per kthread [ 95.666252][ T6071] syzkaller0: entered promiscuous mode [ 95.671865][ T6071] syzkaller0: entered allmulticast mode [ 95.996904][ T6078] veth1_to_hsr: entered promiscuous mode [ 96.003000][ T6078] macvtap1: entered promiscuous mode [ 96.009110][ T6078] macvtap1: entered allmulticast mode [ 96.052614][ T6078] veth1_to_hsr: entered allmulticast mode [ 96.187999][ T6086] netlink: 'syz.2.36': attribute type 8 has an invalid length. [ 96.520318][ T6097] warning: `syz.3.41' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 96.727724][ T5993] IPVS: starting estimator thread 0... [ 96.798462][ T6107] netlink: 12 bytes leftover after parsing attributes in process `syz.1.43'. [ 96.828359][ T6105] IPVS: using max 26 ests per chain, 62400 per kthread [ 97.021013][ T6110] netlink: 32 bytes leftover after parsing attributes in process `syz.4.45'. [ 97.285138][ T6125] netlink: 56 bytes leftover after parsing attributes in process `syz.1.51'. [ 97.297399][ T6125] netlink: 'syz.1.51': attribute type 33 has an invalid length. [ 97.319578][ T6125] netlink: 152 bytes leftover after parsing attributes in process `syz.1.51'. [ 97.343045][ T6125] `: renamed from team0 (while UP) [ 97.398546][ T6130] netlink: 4 bytes leftover after parsing attributes in process `syz.1.51'. [ 97.604221][ T6138] netlink: 24 bytes leftover after parsing attributes in process `syz.3.54'. [ 97.861425][ T6149] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.892082][ T6151] netlink: 'syz.4.57': attribute type 12 has an invalid length. [ 97.912096][ T6149] bridge_slave_0 (unregistering): left allmulticast mode [ 97.920483][ T6149] bridge_slave_0 (unregistering): left promiscuous mode [ 97.928199][ T6149] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.860168][ T6184] syz.2.72 uses obsolete (PF_INET,SOCK_PACKET) [ 99.503264][ T6205] __nla_validate_parse: 4 callbacks suppressed [ 99.503285][ T6205] netlink: 12 bytes leftover after parsing attributes in process `syz.4.80'. [ 99.569086][ T6205] netlink: 12 bytes leftover after parsing attributes in process `syz.4.80'. [ 99.593535][ T6210] tipc: Started in network mode [ 99.606222][ T6210] tipc: Node identity d2b783a63d68, cluster identity 4711 [ 99.627353][ T6210] tipc: Enabled bearer , priority 0 [ 99.701681][ T6209] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 99.718152][ T6206] syzkaller0: entered promiscuous mode [ 99.735208][ T6206] syzkaller0: entered allmulticast mode [ 99.802295][ T6203] tipc: Resetting bearer [ 99.826563][ T6203] tipc: Disabling bearer [ 99.850696][ T6202] netlink: 32 bytes leftover after parsing attributes in process `syz.3.75'. [ 99.876683][ T6202] netlink: 32 bytes leftover after parsing attributes in process `syz.3.75'. [ 99.912167][ T6217] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 100.173302][ T6222] syzkaller1: entered promiscuous mode [ 100.197889][ T6222] syzkaller1: entered allmulticast mode [ 100.251594][ T6231] FAULT_INJECTION: forcing a failure. [ 100.251594][ T6231] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 100.280447][ T6231] CPU: 0 UID: 0 PID: 6231 Comm: syz.3.88 Not tainted syzkaller #0 PREEMPT(full) [ 100.280475][ T6231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 100.280495][ T6231] Call Trace: [ 100.280502][ T6231] [ 100.280512][ T6231] dump_stack_lvl+0x189/0x250 [ 100.280555][ T6231] ? __pfx____ratelimit+0x10/0x10 [ 100.280587][ T6231] ? __pfx_dump_stack_lvl+0x10/0x10 [ 100.280615][ T6231] ? __pfx__printk+0x10/0x10 [ 100.280637][ T6231] ? __might_fault+0xb0/0x130 [ 100.280679][ T6231] should_fail_ex+0x414/0x560 [ 100.280715][ T6231] _copy_from_iter+0x1de/0x1790 [ 100.280753][ T6231] ? rcu_is_watching+0x15/0xb0 [ 100.280781][ T6231] ? kmalloc_reserve+0xbd/0x290 [ 100.280802][ T6231] ? __pfx__copy_from_iter+0x10/0x10 [ 100.280825][ T6231] ? __build_skb_around+0x262/0x3f0 [ 100.280847][ T6231] ? netlink_sendmsg+0x642/0xb30 [ 100.280865][ T6231] ? skb_put+0x11b/0x210 [ 100.280887][ T6231] netlink_sendmsg+0x6b2/0xb30 [ 100.280914][ T6231] ? __pfx_netlink_sendmsg+0x10/0x10 [ 100.280936][ T6231] ? aa_sock_msg_perm+0xf1/0x1d0 [ 100.280968][ T6231] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 100.280988][ T6231] ? __pfx_netlink_sendmsg+0x10/0x10 [ 100.281011][ T6231] __sock_sendmsg+0x21c/0x270 [ 100.281043][ T6231] ____sys_sendmsg+0x52d/0x830 [ 100.281071][ T6231] ? __pfx_____sys_sendmsg+0x10/0x10 [ 100.281104][ T6231] ? import_iovec+0x74/0xa0 [ 100.281132][ T6231] ___sys_sendmsg+0x21f/0x2a0 [ 100.281157][ T6231] ? __pfx____sys_sendmsg+0x10/0x10 [ 100.281215][ T6231] ? __fget_files+0x2a/0x420 [ 100.281234][ T6231] ? __fget_files+0x3a0/0x420 [ 100.281264][ T6231] __sys_sendmmsg+0x227/0x430 [ 100.281294][ T6231] ? __pfx___sys_sendmmsg+0x10/0x10 [ 100.281328][ T6231] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 100.281369][ T6231] ? ksys_write+0x22a/0x250 [ 100.281401][ T6231] ? __pfx_ksys_write+0x10/0x10 [ 100.281436][ T6231] __x64_sys_sendmmsg+0xa0/0xc0 [ 100.281463][ T6231] do_syscall_64+0xfa/0xfa0 [ 100.281482][ T6231] ? lockdep_hardirqs_on+0x9c/0x150 [ 100.281501][ T6231] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.281507][ T6232] raw_sendmsg: syz.4.91 forgot to set AF_INET. Fix it! [ 100.281521][ T6231] ? clear_bhb_loop+0x60/0xb0 [ 100.281546][ T6231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.281562][ T6231] RIP: 0033:0x7f82b318f6c9 [ 100.281592][ T6231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.281611][ T6231] RSP: 002b:00007f82b4021038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 100.281636][ T6231] RAX: ffffffffffffffda RBX: 00007f82b33e6090 RCX: 00007f82b318f6c9 [ 100.281654][ T6231] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000005 [ 100.281670][ T6231] RBP: 00007f82b4021090 R08: 0000000000000000 R09: 0000000000000000 [ 100.281684][ T6231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.281699][ T6231] R13: 00007f82b33e6128 R14: 00007f82b33e6090 R15: 00007fff55f99808 [ 100.281746][ T6231] [ 100.417361][ T6234] netlink: 32 bytes leftover after parsing attributes in process `syz.2.90'. [ 100.771125][ T6228] batadv1: entered promiscuous mode [ 100.776350][ T6243] netlink: 16 bytes leftover after parsing attributes in process `syz.1.92'. [ 100.842056][ T6232] netlink: 88 bytes leftover after parsing attributes in process `syz.4.91'. [ 101.068010][ T6256] netlink: 32 bytes leftover after parsing attributes in process `syz.3.93'. [ 101.328965][ T6268] FAULT_INJECTION: forcing a failure. [ 101.328965][ T6268] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 101.347106][ T6268] CPU: 0 UID: 0 PID: 6268 Comm: syz.2.99 Not tainted syzkaller #0 PREEMPT(full) [ 101.347133][ T6268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 101.347146][ T6268] Call Trace: [ 101.347154][ T6268] [ 101.347163][ T6268] dump_stack_lvl+0x189/0x250 [ 101.347198][ T6268] ? __pfx____ratelimit+0x10/0x10 [ 101.347230][ T6268] ? __pfx_dump_stack_lvl+0x10/0x10 [ 101.347258][ T6268] ? __pfx__printk+0x10/0x10 [ 101.347280][ T6268] ? __might_fault+0xb0/0x130 [ 101.347323][ T6268] should_fail_ex+0x414/0x560 [ 101.347360][ T6268] _copy_from_iter+0x1de/0x1790 [ 101.347392][ T6268] ? rcu_is_watching+0x15/0xb0 [ 101.347420][ T6268] ? kmalloc_reserve+0xbd/0x290 [ 101.347442][ T6268] ? __pfx__copy_from_iter+0x10/0x10 [ 101.347468][ T6268] ? __build_skb_around+0x262/0x3f0 [ 101.347492][ T6268] ? netlink_sendmsg+0x642/0xb30 [ 101.347513][ T6268] ? skb_put+0x11b/0x210 [ 101.347539][ T6268] netlink_sendmsg+0x6b2/0xb30 [ 101.347572][ T6268] ? __pfx_netlink_sendmsg+0x10/0x10 [ 101.347599][ T6268] ? aa_sock_msg_perm+0xf1/0x1d0 [ 101.347658][ T6268] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 101.347679][ T6268] ? __pfx_netlink_sendmsg+0x10/0x10 [ 101.347706][ T6268] __sock_sendmsg+0x21c/0x270 [ 101.347740][ T6268] __sys_sendto+0x3bd/0x520 [ 101.347764][ T6268] ? __pfx___sys_sendto+0x10/0x10 [ 101.347782][ T6268] ? count_memcg_event_mm+0x21/0x260 [ 101.347837][ T6268] ? exc_page_fault+0x82/0x100 [ 101.347862][ T6268] ? do_user_addr_fault+0xc85/0x1380 [ 101.347889][ T6268] __x64_sys_sendto+0xde/0x100 [ 101.347915][ T6268] do_syscall_64+0xfa/0xfa0 [ 101.347934][ T6268] ? lockdep_hardirqs_on+0x9c/0x150 [ 101.347954][ T6268] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.347974][ T6268] ? clear_bhb_loop+0x60/0xb0 [ 101.348000][ T6268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.348019][ T6268] RIP: 0033:0x7f2ed7d9155c [ 101.348037][ T6268] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 101.348053][ T6268] RSP: 002b:00007f2ed8c02ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 101.348073][ T6268] RAX: ffffffffffffffda RBX: 00007f2ed8c02fc0 RCX: 00007f2ed7d9155c [ 101.348087][ T6268] RDX: 000000000000001c RSI: 00007f2ed8c03010 RDI: 0000000000000004 [ 101.348099][ T6268] RBP: 0000000000000000 R08: 00007f2ed8c02f14 R09: 000000000000000c [ 101.348111][ T6268] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 101.348122][ T6268] R13: 00007f2ed8c02f68 R14: 00007f2ed8c03010 R15: 0000000000000000 [ 101.348156][ T6268] [ 101.784035][ T6275] gretap0: entered promiscuous mode [ 101.850200][ T6275] vlan2: entered promiscuous mode [ 101.861192][ T6284] netlink: 24 bytes leftover after parsing attributes in process `syz.2.102'. [ 102.246770][ T6296] IPVS: set_ctl: invalid protocol: 33 172.30.1.4:20000 [ 102.345574][ T6299] netlink: 56 bytes leftover after parsing attributes in process `syz.0.108'. [ 102.755453][ T30] audit: type=1804 audit(1763506005.908:2): pid=6318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.115" name="/newroot/23/memory.events" dev="tmpfs" ino=135 res=1 errno=0 [ 102.790044][ T6317] syzkaller1: entered promiscuous mode [ 102.816482][ T6317] syzkaller1: entered allmulticast mode [ 102.857527][ T30] audit: type=1800 audit(1763506005.918:3): pid=6318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.115" name="memory.events" dev="tmpfs" ino=135 res=0 errno=0 [ 102.899753][ T6322] syzkaller1: entered promiscuous mode [ 102.905888][ T6322] syzkaller1: entered allmulticast mode [ 103.258350][ T6340] netlink: 'syz.1.118': attribute type 8 has an invalid length. [ 104.652797][ T6395] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 104.660127][ T6395] IPv6: NLM_F_CREATE should be set when creating new route [ 104.701970][ T6391] dvmrp6: entered allmulticast mode [ 104.730745][ T6395] lo: entered allmulticast mode [ 104.742951][ T6395] tunl0: entered allmulticast mode [ 104.754194][ T6395] gre0: entered allmulticast mode [ 104.793527][ T6395] gretap0: entered allmulticast mode [ 104.818615][ T6395] erspan0: entered allmulticast mode [ 104.840064][ T6395] ip_vti0: entered allmulticast mode [ 104.870062][ T6395] ip6_vti0: entered allmulticast mode [ 104.883970][ T6395] sit0: entered allmulticast mode [ 104.900866][ T6395] ip6tnl0: entered allmulticast mode [ 104.910659][ T6395] ip6gre0: entered allmulticast mode [ 104.920425][ T6395] syz_tun: entered allmulticast mode [ 104.931652][ T6395] ip6gretap0: entered allmulticast mode [ 104.947397][ T6395] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.955356][ T6395] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.968994][ T6395] bridge0: entered allmulticast mode [ 104.979126][ T6395] vcan0: entered allmulticast mode [ 104.989013][ T6395] bond0: entered allmulticast mode [ 104.994584][ T6395] bond_slave_0: entered allmulticast mode [ 105.003145][ T6395] bond_slave_1: entered allmulticast mode [ 105.016640][ T6395] team0: entered allmulticast mode [ 105.021793][ T6395] team_slave_0: entered allmulticast mode [ 105.031743][ T6395] team_slave_1: entered allmulticast mode [ 105.041015][ T6395] dummy0: entered allmulticast mode [ 105.050232][ T6395] nlmon0: entered allmulticast mode [ 105.057456][ T6395] caif0: entered allmulticast mode [ 105.063239][ T6395] batadv0: entered allmulticast mode [ 105.073737][ T6395] vxcan0: entered allmulticast mode [ 105.081267][ T6395] vxcan1: entered allmulticast mode [ 105.090006][ T6395] veth0: entered allmulticast mode [ 105.100734][ T6395] veth1: entered allmulticast mode [ 105.122260][ T6395] wg0: entered allmulticast mode [ 105.133767][ T6395] wg1: entered allmulticast mode [ 105.150559][ T6395] wg2: entered allmulticast mode [ 105.159163][ T6395] veth0_to_bridge: entered allmulticast mode [ 105.180107][ T6395] veth1_to_bridge: entered allmulticast mode [ 105.196968][ T6395] veth0_to_bond: entered allmulticast mode [ 105.220109][ T6395] veth1_to_bond: entered allmulticast mode [ 105.239081][ T6395] veth0_to_team: entered allmulticast mode [ 105.253470][ T6395] veth1_to_team: entered allmulticast mode [ 105.269333][ T6395] veth0_to_batadv: entered allmulticast mode [ 105.283221][ T6395] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.292607][ T6395] batadv_slave_0: entered allmulticast mode [ 105.306478][ T6395] veth1_to_batadv: entered allmulticast mode [ 105.320608][ T6395] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.347873][ T6395] batadv_slave_1: entered allmulticast mode [ 105.368966][ T6395] xfrm0: entered allmulticast mode [ 105.379533][ T6395] veth0_to_hsr: entered allmulticast mode [ 105.390950][ T6395] hsr_slave_0: entered allmulticast mode [ 105.401132][ T6395] veth1_to_hsr: entered allmulticast mode [ 105.414040][ T6395] hsr_slave_1: entered allmulticast mode [ 105.424833][ T6395] hsr0: entered allmulticast mode [ 105.435432][ T6395] veth1_virt_wifi: entered allmulticast mode [ 105.451356][ T6395] veth0_virt_wifi: entered allmulticast mode [ 105.474899][ T6395] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 105.498395][ T6395] veth1_vlan: entered allmulticast mode [ 105.522112][ T6395] veth0_vlan: entered allmulticast mode [ 105.563988][ T6395] vlan0: entered allmulticast mode [ 105.570247][ T6395] vlan1: entered allmulticast mode [ 105.580389][ T6395] macvlan0: entered allmulticast mode [ 105.595805][ T6395] macvlan1: entered allmulticast mode [ 105.605579][ T6395] ipvlan0: entered allmulticast mode [ 105.611162][ T6395] ipvlan1: entered allmulticast mode [ 105.619052][ T6395] veth1_macvtap: entered allmulticast mode [ 105.629160][ T6395] veth0_macvtap: entered allmulticast mode [ 105.639945][ T6395] macvtap0: entered allmulticast mode [ 105.650752][ T6395] macsec0: entered allmulticast mode [ 105.673530][ T6395] geneve0: entered allmulticast mode [ 105.694239][ T6395] geneve1: entered allmulticast mode [ 105.708727][ T6395] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 105.738511][ T6395] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 105.749221][ T6395] netdevsim netdevsim3 netdevsim2: entered allmulticast mode [ 105.759970][ T6395] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 105.777108][ T6395] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode [ 105.794069][ T6395] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 105.803248][ T6395] mac80211_hwsim hwsim12 wlan2: entered allmulticast mode [ 105.811946][ T6399] netlink: 'syz.2.140': attribute type 12 has an invalid length. [ 105.822484][ T6399] netlink: 'syz.2.140': attribute type 29 has an invalid length. [ 105.831619][ T6399] __nla_validate_parse: 3 callbacks suppressed [ 105.831636][ T6399] netlink: 148 bytes leftover after parsing attributes in process `syz.2.140'. [ 105.847336][ T6399] netlink: 43 bytes leftover after parsing attributes in process `syz.2.140'. [ 105.865624][ T6400] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 105.891873][ T6412] netlink: 'syz.1.141': attribute type 12 has an invalid length. [ 105.957128][ T13] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.992719][ T13] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.052792][ T13] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.110846][ T1136] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.717763][ T6448] netlink: 16 bytes leftover after parsing attributes in process `syz.4.151'. [ 106.957597][ T6445] netlink: 'syz.4.151': attribute type 10 has an invalid length. [ 106.988311][ T6445] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 107.047362][ T6445] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 107.619564][ T6491] netlink: 12 bytes leftover after parsing attributes in process `syz.4.165'. [ 107.770909][ T6498] netlink: 12 bytes leftover after parsing attributes in process `syz.2.167'. [ 108.109999][ T6512] netlink: 244 bytes leftover after parsing attributes in process `syz.2.171'. [ 108.133193][ T6512] netlink: 16 bytes leftover after parsing attributes in process `syz.2.171'. [ 108.144498][ T6512] netlink: 16 bytes leftover after parsing attributes in process `syz.2.171'. [ 108.219970][ T6512] netlink: 12 bytes leftover after parsing attributes in process `syz.2.171'. [ 108.561249][ T898] IPVS: starting estimator thread 0... [ 108.676460][ T6532] IPVS: using max 26 ests per chain, 62400 per kthread [ 108.766337][ T6538] netlink: 8 bytes leftover after parsing attributes in process `syz.3.178'. [ 110.466939][ T6600] batadv1: entered promiscuous mode [ 110.486708][ T6601] netlink: 'syz.2.201': attribute type 15 has an invalid length. [ 110.514812][ T6604] netlink: 'syz.2.201': attribute type 15 has an invalid length. [ 110.625304][ T6608] x_tables: duplicate underflow at hook 4 [ 110.626002][ T6609] x_tables: duplicate underflow at hook 4 [ 110.983749][ T5961] IPVS: starting estimator thread 0... [ 111.073582][ T6624] __nla_validate_parse: 6 callbacks suppressed [ 111.073603][ T6624] netlink: 12 bytes leftover after parsing attributes in process `syz.3.207'. [ 111.085378][ T6619] IPVS: using max 27 ests per chain, 64800 per kthread [ 111.280745][ T6632] netlink: 8 bytes leftover after parsing attributes in process `syz.4.208'. [ 111.489050][ T6641] netlink: 'syz.1.210': attribute type 1 has an invalid length. [ 111.522709][ T6641] netlink: 'syz.1.210': attribute type 1 has an invalid length. [ 111.545951][ T6641] netlink: 9172 bytes leftover after parsing attributes in process `syz.1.210'. [ 111.669134][ T6637] syzkaller1: entered promiscuous mode [ 111.676338][ T6637] syzkaller1: entered allmulticast mode [ 111.779615][ T6632] syz.4.208 (6632) used greatest stack depth: 16744 bytes left [ 111.947642][ T6661] FAULT_INJECTION: forcing a failure. [ 111.947642][ T6661] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 111.973177][ T6661] CPU: 1 UID: 0 PID: 6661 Comm: syz.0.216 Not tainted syzkaller #0 PREEMPT(full) [ 111.973205][ T6661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 111.973218][ T6661] Call Trace: [ 111.973226][ T6661] [ 111.973236][ T6661] dump_stack_lvl+0x189/0x250 [ 111.973271][ T6661] ? __pfx____ratelimit+0x10/0x10 [ 111.973303][ T6661] ? __pfx_dump_stack_lvl+0x10/0x10 [ 111.973331][ T6661] ? __pfx__printk+0x10/0x10 [ 111.973353][ T6661] ? __might_fault+0xb0/0x130 [ 111.973394][ T6661] should_fail_ex+0x414/0x560 [ 111.973430][ T6661] _copy_from_iter+0x1de/0x1790 [ 111.973460][ T6661] ? rcu_is_watching+0x15/0xb0 [ 111.973488][ T6661] ? kmalloc_reserve+0xbd/0x290 [ 111.973510][ T6661] ? __pfx__copy_from_iter+0x10/0x10 [ 111.973535][ T6661] ? __build_skb_around+0x262/0x3f0 [ 111.973559][ T6661] ? netlink_sendmsg+0x642/0xb30 [ 111.973580][ T6661] ? skb_put+0x11b/0x210 [ 111.973605][ T6661] netlink_sendmsg+0x6b2/0xb30 [ 111.973638][ T6661] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.973664][ T6661] ? aa_sock_msg_perm+0xf1/0x1d0 [ 111.973697][ T6661] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 111.973717][ T6661] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.973741][ T6661] __sock_sendmsg+0x21c/0x270 [ 111.973774][ T6661] ____sys_sendmsg+0x505/0x830 [ 111.973804][ T6661] ? __pfx_____sys_sendmsg+0x10/0x10 [ 111.973838][ T6661] ? import_iovec+0x74/0xa0 [ 111.973868][ T6661] ___sys_sendmsg+0x21f/0x2a0 [ 111.973894][ T6661] ? __pfx____sys_sendmsg+0x10/0x10 [ 111.973957][ T6661] ? __fget_files+0x2a/0x420 [ 111.973984][ T6661] ? __fget_files+0x3a0/0x420 [ 111.974015][ T6661] __x64_sys_sendmsg+0x19b/0x260 [ 111.974043][ T6661] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 111.974077][ T6661] ? __pfx_ksys_write+0x10/0x10 [ 111.974110][ T6661] ? do_syscall_64+0xbe/0xfa0 [ 111.974135][ T6661] do_syscall_64+0xfa/0xfa0 [ 111.974153][ T6661] ? lockdep_hardirqs_on+0x9c/0x150 [ 111.974174][ T6661] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.974194][ T6661] ? clear_bhb_loop+0x60/0xb0 [ 111.974218][ T6661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.974236][ T6661] RIP: 0033:0x7fa561f8f6c9 [ 111.974254][ T6661] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.974270][ T6661] RSP: 002b:00007fa562db7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 111.974291][ T6661] RAX: ffffffffffffffda RBX: 00007fa5621e5fa0 RCX: 00007fa561f8f6c9 [ 111.974305][ T6661] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 111.974317][ T6661] RBP: 00007fa562db7090 R08: 0000000000000000 R09: 0000000000000000 [ 111.974329][ T6661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.974340][ T6661] R13: 00007fa5621e6038 R14: 00007fa5621e5fa0 R15: 00007fffa619b908 [ 111.974372][ T6661] [ 112.055205][ T6272] wlan1: Trigger new scan to find an IBSS to join [ 112.596135][ T6686] FAULT_INJECTION: forcing a failure. [ 112.596135][ T6686] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 112.682578][ T6686] CPU: 0 UID: 0 PID: 6686 Comm: syz.3.223 Not tainted syzkaller #0 PREEMPT(full) [ 112.682607][ T6686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 112.682618][ T6686] Call Trace: [ 112.682626][ T6686] [ 112.682635][ T6686] dump_stack_lvl+0x189/0x250 [ 112.682669][ T6686] ? __pfx____ratelimit+0x10/0x10 [ 112.682701][ T6686] ? __pfx_dump_stack_lvl+0x10/0x10 [ 112.682728][ T6686] ? __pfx__printk+0x10/0x10 [ 112.682750][ T6686] ? __might_fault+0xb0/0x130 [ 112.682791][ T6686] should_fail_ex+0x414/0x560 [ 112.682828][ T6686] _copy_from_user+0x2d/0xb0 [ 112.682857][ T6686] ___sys_sendmsg+0x158/0x2a0 [ 112.682884][ T6686] ? __pfx____sys_sendmsg+0x10/0x10 [ 112.682959][ T6686] ? __fget_files+0x2a/0x420 [ 112.682979][ T6686] ? __fget_files+0x3a0/0x420 [ 112.683011][ T6686] __x64_sys_sendmsg+0x19b/0x260 [ 112.683039][ T6686] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 112.683074][ T6686] ? __pfx_ksys_write+0x10/0x10 [ 112.683108][ T6686] ? do_syscall_64+0xbe/0xfa0 [ 112.683133][ T6686] do_syscall_64+0xfa/0xfa0 [ 112.683152][ T6686] ? lockdep_hardirqs_on+0x9c/0x150 [ 112.683172][ T6686] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.683193][ T6686] ? clear_bhb_loop+0x60/0xb0 [ 112.683218][ T6686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.683237][ T6686] RIP: 0033:0x7f82b318f6c9 [ 112.683255][ T6686] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.683271][ T6686] RSP: 002b:00007f82b4042038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 112.683293][ T6686] RAX: ffffffffffffffda RBX: 00007f82b33e5fa0 RCX: 00007f82b318f6c9 [ 112.683308][ T6686] RDX: 0000000004000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 112.683320][ T6686] RBP: 00007f82b4042090 R08: 0000000000000000 R09: 0000000000000000 [ 112.683332][ T6686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.683344][ T6686] R13: 00007f82b33e6038 R14: 00007f82b33e5fa0 R15: 00007fff55f99808 [ 112.683380][ T6686] [ 112.916349][ T6691] netlink: 'syz.2.224': attribute type 3 has an invalid length. [ 113.209151][ T6702] netlink: 32 bytes leftover after parsing attributes in process `syz.2.226'. [ 113.221569][ T6703] netlink: 32 bytes leftover after parsing attributes in process `syz.2.226'. [ 113.243010][ T6705] FAULT_INJECTION: forcing a failure. [ 113.243010][ T6705] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 113.248505][ T6699] syzkaller1: entered promiscuous mode [ 113.262382][ T6699] syzkaller1: entered allmulticast mode [ 113.309026][ T6705] CPU: 0 UID: 0 PID: 6705 Comm: syz.4.228 Not tainted syzkaller #0 PREEMPT(full) [ 113.309053][ T6705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 113.309065][ T6705] Call Trace: [ 113.309073][ T6705] [ 113.309081][ T6705] dump_stack_lvl+0x189/0x250 [ 113.309114][ T6705] ? __pfx____ratelimit+0x10/0x10 [ 113.309144][ T6705] ? __pfx_dump_stack_lvl+0x10/0x10 [ 113.309170][ T6705] ? __pfx__printk+0x10/0x10 [ 113.309191][ T6705] ? __might_fault+0xb0/0x130 [ 113.309232][ T6705] should_fail_ex+0x414/0x560 [ 113.309269][ T6705] _copy_from_user+0x2d/0xb0 [ 113.309296][ T6705] ___sys_sendmsg+0x158/0x2a0 [ 113.309322][ T6705] ? __pfx____sys_sendmsg+0x10/0x10 [ 113.309390][ T6705] ? __might_fault+0xb0/0x130 [ 113.309422][ T6705] __sys_sendmmsg+0x227/0x430 [ 113.309452][ T6705] ? __pfx___sys_sendmmsg+0x10/0x10 [ 113.309487][ T6705] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 113.309529][ T6705] ? ksys_write+0x22a/0x250 [ 113.309561][ T6705] ? __pfx_ksys_write+0x10/0x10 [ 113.309595][ T6705] __x64_sys_sendmmsg+0xa0/0xc0 [ 113.309621][ T6705] do_syscall_64+0xfa/0xfa0 [ 113.309640][ T6705] ? lockdep_hardirqs_on+0x9c/0x150 [ 113.309670][ T6705] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.309690][ T6705] ? clear_bhb_loop+0x60/0xb0 [ 113.309715][ T6705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.309735][ T6705] RIP: 0033:0x7f42a538f6c9 [ 113.309753][ T6705] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.309769][ T6705] RSP: 002b:00007f42a6293038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 113.309790][ T6705] RAX: ffffffffffffffda RBX: 00007f42a55e6090 RCX: 00007f42a538f6c9 [ 113.309805][ T6705] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000005 [ 113.309818][ T6705] RBP: 00007f42a6293090 R08: 0000000000000000 R09: 0000000000000000 [ 113.309829][ T6705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 113.309840][ T6705] R13: 00007f42a55e6128 R14: 00007f42a55e6090 R15: 00007ffd1e72a7a8 [ 113.309874][ T6705] [ 113.829651][ T6713] syzkaller0: entered promiscuous mode [ 113.836387][ T6713] syzkaller0: entered allmulticast mode [ 113.939434][ T6719] trusted_key: syz.3.232 sent an empty control message without MSG_MORE. [ 114.081078][ T6724] netlink: 'syz.1.235': attribute type 1 has an invalid length. [ 114.302393][ T6724] bond1: entered promiscuous mode [ 114.347912][ T6724] bond1: entered allmulticast mode [ 114.401190][ T6728] bond1: (slave ip6gretap1): making interface the new active one [ 114.422908][ T6728] ip6gretap1: entered promiscuous mode [ 114.431151][ T6728] ip6gretap1: entered allmulticast mode [ 114.439522][ T6728] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 114.705997][ T6740] syzkaller0: entered promiscuous mode [ 114.711619][ T6740] syzkaller0: entered allmulticast mode [ 115.876091][ T6780] sctp: [Deprecated]: syz.1.250 (pid 6780) Use of struct sctp_assoc_value in delayed_ack socket option. [ 115.876091][ T6780] Use struct sctp_sack_info instead [ 116.048559][ T60] wlan1: Trigger new scan to find an IBSS to join [ 116.053484][ T6773] netlink: 8 bytes leftover after parsing attributes in process `syz.4.246'. [ 116.102851][ T30] audit: type=1804 audit(1763506019.258:4): pid=6799 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.251" name="/newroot/44/memory.events" dev="tmpfs" ino=244 res=1 errno=0 [ 116.181411][ T30] audit: type=1800 audit(1763506019.258:5): pid=6799 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.251" name="memory.events" dev="tmpfs" ino=244 res=0 errno=0 [ 116.390703][ T6812] FAULT_INJECTION: forcing a failure. [ 116.390703][ T6812] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 116.422750][ T6812] CPU: 0 UID: 0 PID: 6812 Comm: syz.0.253 Not tainted syzkaller #0 PREEMPT(full) [ 116.422778][ T6812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 116.422789][ T6812] Call Trace: [ 116.422798][ T6812] [ 116.422807][ T6812] dump_stack_lvl+0x189/0x250 [ 116.422840][ T6812] ? __pfx____ratelimit+0x10/0x10 [ 116.422873][ T6812] ? __pfx_dump_stack_lvl+0x10/0x10 [ 116.422902][ T6812] ? __pfx__printk+0x10/0x10 [ 116.422923][ T6812] ? __might_fault+0xb0/0x130 [ 116.422965][ T6812] should_fail_ex+0x414/0x560 [ 116.423002][ T6812] _copy_from_iter+0x1de/0x1790 [ 116.423033][ T6812] ? rcu_is_watching+0x15/0xb0 [ 116.423062][ T6812] ? kmalloc_reserve+0xbd/0x290 [ 116.423084][ T6812] ? __pfx__copy_from_iter+0x10/0x10 [ 116.423110][ T6812] ? __build_skb_around+0x262/0x3f0 [ 116.423134][ T6812] ? netlink_sendmsg+0x642/0xb30 [ 116.423156][ T6812] ? skb_put+0x11b/0x210 [ 116.423181][ T6812] netlink_sendmsg+0x6b2/0xb30 [ 116.423214][ T6812] ? __pfx_netlink_sendmsg+0x10/0x10 [ 116.423241][ T6812] ? aa_sock_msg_perm+0xf1/0x1d0 [ 116.423274][ T6812] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 116.423294][ T6812] ? __pfx_netlink_sendmsg+0x10/0x10 [ 116.423318][ T6812] __sock_sendmsg+0x21c/0x270 [ 116.423361][ T6812] ____sys_sendmsg+0x52d/0x830 [ 116.423392][ T6812] ? __pfx_____sys_sendmsg+0x10/0x10 [ 116.423427][ T6812] ? import_iovec+0x74/0xa0 [ 116.423457][ T6812] ___sys_sendmsg+0x21f/0x2a0 [ 116.423484][ T6812] ? __pfx____sys_sendmsg+0x10/0x10 [ 116.423557][ T6812] ? __might_fault+0xb0/0x130 [ 116.423591][ T6812] __sys_sendmmsg+0x227/0x430 [ 116.423621][ T6812] ? __pfx___sys_sendmmsg+0x10/0x10 [ 116.423656][ T6812] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 116.423700][ T6812] ? ksys_write+0x22a/0x250 [ 116.423731][ T6812] ? __pfx_ksys_write+0x10/0x10 [ 116.423766][ T6812] __x64_sys_sendmmsg+0xa0/0xc0 [ 116.423793][ T6812] do_syscall_64+0xfa/0xfa0 [ 116.423812][ T6812] ? lockdep_hardirqs_on+0x9c/0x150 [ 116.423831][ T6812] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.423851][ T6812] ? clear_bhb_loop+0x60/0xb0 [ 116.423876][ T6812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.423895][ T6812] RIP: 0033:0x7fa561f8f6c9 [ 116.423914][ T6812] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.423930][ T6812] RSP: 002b:00007fa562d96038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 116.423952][ T6812] RAX: ffffffffffffffda RBX: 00007fa5621e6090 RCX: 00007fa561f8f6c9 [ 116.423966][ T6812] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000005 [ 116.423979][ T6812] RBP: 00007fa562d96090 R08: 0000000000000000 R09: 0000000000000000 [ 116.423991][ T6812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 116.424002][ T6812] R13: 00007fa5621e6128 R14: 00007fa5621e6090 R15: 00007fffa619b908 [ 116.424036][ T6812] [ 117.032321][ T6826] netlink: 4 bytes leftover after parsing attributes in process `syz.3.256'. [ 117.109800][ T6823] FAULT_INJECTION: forcing a failure. [ 117.109800][ T6823] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 117.136011][ T6823] CPU: 1 UID: 0 PID: 6823 Comm: syz.4.257 Not tainted syzkaller #0 PREEMPT(full) [ 117.136037][ T6823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 117.136048][ T6823] Call Trace: [ 117.136056][ T6823] [ 117.136063][ T6823] dump_stack_lvl+0x189/0x250 [ 117.136100][ T6823] ? __pfx____ratelimit+0x10/0x10 [ 117.136129][ T6823] ? __pfx_dump_stack_lvl+0x10/0x10 [ 117.136154][ T6823] ? __pfx__printk+0x10/0x10 [ 117.136185][ T6823] should_fail_ex+0x414/0x560 [ 117.136218][ T6823] _copy_to_user+0x31/0xb0 [ 117.136245][ T6823] simple_read_from_buffer+0xe1/0x170 [ 117.136278][ T6823] proc_fail_nth_read+0x1b3/0x220 [ 117.136306][ T6823] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 117.136342][ T6823] ? rw_verify_area+0x2a6/0x4d0 [ 117.136366][ T6823] ? __lock_acquire+0xab9/0xd20 [ 117.136382][ T6823] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 117.136407][ T6823] vfs_read+0x200/0xa30 [ 117.136431][ T6823] ? fdget_pos+0x247/0x320 [ 117.136453][ T6823] ? __pfx___mutex_lock+0x10/0x10 [ 117.136474][ T6823] ? __pfx_vfs_read+0x10/0x10 [ 117.136501][ T6823] ? __fget_files+0x2a/0x420 [ 117.136523][ T6823] ? __fget_files+0x3a0/0x420 [ 117.136539][ T6823] ? __fget_files+0x2a/0x420 [ 117.136565][ T6823] ksys_read+0x145/0x250 [ 117.136593][ T6823] ? __pfx_ksys_read+0x10/0x10 [ 117.136623][ T6823] ? do_syscall_64+0xbe/0xfa0 [ 117.136645][ T6823] do_syscall_64+0xfa/0xfa0 [ 117.136661][ T6823] ? lockdep_hardirqs_on+0x9c/0x150 [ 117.136679][ T6823] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.136697][ T6823] ? clear_bhb_loop+0x60/0xb0 [ 117.136719][ T6823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.136736][ T6823] RIP: 0033:0x7f42a538e0dc [ 117.136753][ T6823] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 117.136768][ T6823] RSP: 002b:00007f42a62b4030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 117.136787][ T6823] RAX: ffffffffffffffda RBX: 00007f42a55e5fa0 RCX: 00007f42a538e0dc [ 117.136800][ T6823] RDX: 000000000000000f RSI: 00007f42a62b40a0 RDI: 0000000000000003 [ 117.136811][ T6823] RBP: 00007f42a62b4090 R08: 0000000000000000 R09: 0000000000000000 [ 117.136822][ T6823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 117.136832][ T6823] R13: 00007f42a55e6038 R14: 00007f42a55e5fa0 R15: 00007ffd1e72a7a8 [ 117.136864][ T6823] [ 117.547171][ T60] wlan1: Creating new IBSS network, BSSID b6:b8:24:5a:53:cc [ 117.576368][ T6839] netlink: 32 bytes leftover after parsing attributes in process `syz.2.258'. [ 117.683627][ T6833] batadv1: entered promiscuous mode [ 117.865381][ T6843] syzkaller0: entered promiscuous mode [ 117.878301][ T6843] syzkaller0: entered allmulticast mode [ 118.332026][ T6870] FAULT_INJECTION: forcing a failure. [ 118.332026][ T6870] name failslab, interval 1, probability 0, space 0, times 0 [ 118.360464][ T6870] CPU: 0 UID: 0 PID: 6870 Comm: syz.1.266 Not tainted syzkaller #0 PREEMPT(full) [ 118.360492][ T6870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 118.360505][ T6870] Call Trace: [ 118.360513][ T6870] [ 118.360521][ T6870] dump_stack_lvl+0x189/0x250 [ 118.360553][ T6870] ? __pfx____ratelimit+0x10/0x10 [ 118.360586][ T6870] ? __pfx_dump_stack_lvl+0x10/0x10 [ 118.360613][ T6870] ? __pfx__printk+0x10/0x10 [ 118.360638][ T6870] ? __lock_acquire+0xab9/0xd20 [ 118.360667][ T6870] should_fail_ex+0x414/0x560 [ 118.360704][ T6870] should_failslab+0xa8/0x100 [ 118.360727][ T6870] kmem_cache_alloc_noprof+0x74/0x6e0 [ 118.360756][ T6870] ? skb_clone+0x212/0x3a0 [ 118.360786][ T6870] skb_clone+0x212/0x3a0 [ 118.360815][ T6870] __netlink_deliver_tap+0x404/0x850 [ 118.360852][ T6870] ? netlink_deliver_tap+0x2e/0x1b0 [ 118.360877][ T6870] netlink_deliver_tap+0x19c/0x1b0 [ 118.360901][ T6870] netlink_unicast+0x7fa/0x9e0 [ 118.360944][ T6870] ? __pfx_netlink_unicast+0x10/0x10 [ 118.360979][ T6870] ? netlink_sendmsg+0x642/0xb30 [ 118.360999][ T6870] ? skb_put+0x11b/0x210 [ 118.361025][ T6870] netlink_sendmsg+0x805/0xb30 [ 118.361058][ T6870] ? __pfx_netlink_sendmsg+0x10/0x10 [ 118.361084][ T6870] ? aa_sock_msg_perm+0xf1/0x1d0 [ 118.361117][ T6870] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 118.361137][ T6870] ? __pfx_netlink_sendmsg+0x10/0x10 [ 118.361160][ T6870] __sock_sendmsg+0x21c/0x270 [ 118.361202][ T6870] ____sys_sendmsg+0x52d/0x830 [ 118.361232][ T6870] ? __pfx_____sys_sendmsg+0x10/0x10 [ 118.361265][ T6870] ? import_iovec+0x74/0xa0 [ 118.361295][ T6870] ___sys_sendmsg+0x21f/0x2a0 [ 118.361321][ T6870] ? __pfx____sys_sendmsg+0x10/0x10 [ 118.361394][ T6870] ? __might_fault+0xb0/0x130 [ 118.361428][ T6870] __sys_sendmmsg+0x227/0x430 [ 118.361464][ T6870] ? __pfx___sys_sendmmsg+0x10/0x10 [ 118.361499][ T6870] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 118.361543][ T6870] ? ksys_write+0x22a/0x250 [ 118.361575][ T6870] ? __pfx_ksys_write+0x10/0x10 [ 118.361611][ T6870] __x64_sys_sendmmsg+0xa0/0xc0 [ 118.361638][ T6870] do_syscall_64+0xfa/0xfa0 [ 118.361657][ T6870] ? lockdep_hardirqs_on+0x9c/0x150 [ 118.361677][ T6870] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.361697][ T6870] ? clear_bhb_loop+0x60/0xb0 [ 118.361723][ T6870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.361742][ T6870] RIP: 0033:0x7fcfb658f6c9 [ 118.361761][ T6870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.361778][ T6870] RSP: 002b:00007fcfb746f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 118.361800][ T6870] RAX: ffffffffffffffda RBX: 00007fcfb67e5fa0 RCX: 00007fcfb658f6c9 [ 118.361814][ T6870] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000005 [ 118.361828][ T6870] RBP: 00007fcfb746f090 R08: 0000000000000000 R09: 0000000000000000 [ 118.361840][ T6870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 118.361852][ T6870] R13: 00007fcfb67e6038 R14: 00007fcfb67e5fa0 R15: 00007ffeabf33048 [ 118.361887][ T6870] [ 119.358524][ T6915] netlink: 4 bytes leftover after parsing attributes in process `syz.2.276'. [ 119.533818][ T6925] netlink: 'syz.3.278': attribute type 1 has an invalid length. [ 119.542452][ T6925] netlink: 8 bytes leftover after parsing attributes in process `syz.3.278'. [ 119.614393][ T6928] batadv1: entered promiscuous mode [ 119.672446][ T6935] netlink: 68 bytes leftover after parsing attributes in process `syz.0.279'. [ 119.803908][ T6938] netlink: 32 bytes leftover after parsing attributes in process `syz.0.279'. [ 119.844026][ T6920] netlink: 8 bytes leftover after parsing attributes in process `syz.3.278'. [ 119.934802][ T6920] netlink: 4 bytes leftover after parsing attributes in process `syz.3.278'. [ 120.497253][ T6964] ipt_REJECT: TCP_RESET invalid for non-tcp [ 120.738087][ T6966] tipc: Started in network mode [ 120.743023][ T6966] tipc: Node identity 8e21c4db401, cluster identity 4711 [ 120.756653][ T6966] tipc: Enabled bearer , priority 0 [ 120.768877][ T6980] netlink: 'syz.2.289': attribute type 1 has an invalid length. [ 120.789293][ T6972] syzkaller0: entered promiscuous mode [ 120.805444][ T6972] syzkaller0: entered allmulticast mode [ 120.853717][ T6966] tipc: Resetting bearer [ 120.903267][ T6965] tipc: Resetting bearer [ 120.951857][ T6965] tipc: Disabling bearer [ 120.976068][ T6984] batadv1: entered promiscuous mode [ 121.023423][ T6989] openvswitch: netlink: ufid size 24 bytes exceeds the range (1, 16) [ 121.105105][ T6990] netlink: 32 bytes leftover after parsing attributes in process `syz.1.291'. [ 121.214933][ T6995] netlink: 12 bytes leftover after parsing attributes in process `syz.4.293'. [ 121.337130][ T6997] sctp: [Deprecated]: syz.0.294 (pid 6997) Use of struct sctp_assoc_value in delayed_ack socket option. [ 121.337130][ T6997] Use struct sctp_sack_info instead [ 121.803943][ T7015] syzkaller0: entered promiscuous mode [ 121.810427][ T7015] syzkaller0: entered allmulticast mode [ 122.743572][ T7047] netlink: 108 bytes leftover after parsing attributes in process `syz.2.303'. [ 122.922643][ T7055] netlink: 24 bytes leftover after parsing attributes in process `syz.4.302'. [ 122.972360][ T7053] netlink: 'syz.4.302': attribute type 1 has an invalid length. [ 122.997352][ T7053] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 123.508837][ T7059] bond1: Removing last ns target with arp_interval on [ 123.541201][ T7060] bond2: Removing last ns target with arp_interval on [ 123.573892][ T7079] batadv1: entered promiscuous mode [ 123.641086][ T7080] netlink: 68 bytes leftover after parsing attributes in process `syz.2.307'. [ 123.667383][ T7073] netlink: 'syz.3.308': attribute type 7 has an invalid length. [ 123.699795][ T7073] netlink: 'syz.3.308': attribute type 8 has an invalid length. [ 123.711468][ T7073] netlink: 'syz.3.308': attribute type 13 has an invalid length. [ 123.750930][ T7087] netlink: 32 bytes leftover after parsing attributes in process `syz.2.307'. [ 123.789267][ T7082] sctp: [Deprecated]: syz.1.309 (pid 7082) Use of struct sctp_assoc_value in delayed_ack socket option. [ 123.789267][ T7082] Use struct sctp_sack_info instead [ 124.173681][ T7094] syzkaller0: entered promiscuous mode [ 124.205484][ T7094] syzkaller0: entered allmulticast mode [ 124.549196][ T7107] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 124.580997][ T7104] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 125.281564][ T7138] FAULT_INJECTION: forcing a failure. [ 125.281564][ T7138] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 125.328505][ T7138] CPU: 0 UID: 0 PID: 7138 Comm: syz.0.319 Not tainted syzkaller #0 PREEMPT(full) [ 125.328535][ T7138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 125.328547][ T7138] Call Trace: [ 125.328555][ T7138] [ 125.328564][ T7138] dump_stack_lvl+0x189/0x250 [ 125.328598][ T7138] ? __pfx____ratelimit+0x10/0x10 [ 125.328627][ T7138] ? __pfx_dump_stack_lvl+0x10/0x10 [ 125.328656][ T7138] ? __pfx__printk+0x10/0x10 [ 125.328677][ T7138] ? __might_fault+0xb0/0x130 [ 125.328720][ T7138] should_fail_ex+0x414/0x560 [ 125.328757][ T7138] _copy_from_iter+0x1de/0x1790 [ 125.328788][ T7138] ? rcu_is_watching+0x15/0xb0 [ 125.328816][ T7138] ? kmalloc_reserve+0xbd/0x290 [ 125.328838][ T7138] ? __pfx__copy_from_iter+0x10/0x10 [ 125.328872][ T7138] ? __build_skb_around+0x262/0x3f0 [ 125.328896][ T7138] ? netlink_sendmsg+0x642/0xb30 [ 125.328917][ T7138] ? skb_put+0x11b/0x210 [ 125.328943][ T7138] netlink_sendmsg+0x6b2/0xb30 [ 125.328976][ T7138] ? __pfx_netlink_sendmsg+0x10/0x10 [ 125.329003][ T7138] ? aa_sock_msg_perm+0xf1/0x1d0 [ 125.329035][ T7138] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 125.329055][ T7138] ? __pfx_netlink_sendmsg+0x10/0x10 [ 125.329079][ T7138] __sock_sendmsg+0x21c/0x270 [ 125.329112][ T7138] ____sys_sendmsg+0x52d/0x830 [ 125.329142][ T7138] ? __pfx_____sys_sendmsg+0x10/0x10 [ 125.329176][ T7138] ? import_iovec+0x74/0xa0 [ 125.329206][ T7138] ___sys_sendmsg+0x21f/0x2a0 [ 125.329233][ T7138] ? __pfx____sys_sendmsg+0x10/0x10 [ 125.329304][ T7138] ? __might_fault+0xb0/0x130 [ 125.329338][ T7138] __sys_sendmmsg+0x227/0x430 [ 125.329369][ T7138] ? __pfx___sys_sendmmsg+0x10/0x10 [ 125.329404][ T7138] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 125.329445][ T7138] ? ksys_write+0x22a/0x250 [ 125.329478][ T7138] ? __pfx_ksys_write+0x10/0x10 [ 125.329513][ T7138] __x64_sys_sendmmsg+0xa0/0xc0 [ 125.329539][ T7138] do_syscall_64+0xfa/0xfa0 [ 125.329558][ T7138] ? lockdep_hardirqs_on+0x9c/0x150 [ 125.329578][ T7138] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.329597][ T7138] ? clear_bhb_loop+0x60/0xb0 [ 125.329622][ T7138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.329642][ T7138] RIP: 0033:0x7fa561f8f6c9 [ 125.329660][ T7138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.329676][ T7138] RSP: 002b:00007fa562db7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 125.329697][ T7138] RAX: ffffffffffffffda RBX: 00007fa5621e5fa0 RCX: 00007fa561f8f6c9 [ 125.329712][ T7138] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000005 [ 125.329725][ T7138] RBP: 00007fa562db7090 R08: 0000000000000000 R09: 0000000000000000 [ 125.329737][ T7138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 125.329748][ T7138] R13: 00007fa5621e6038 R14: 00007fa5621e5fa0 R15: 00007fffa619b908 [ 125.329782][ T7138] [ 126.169632][ T7170] sctp: [Deprecated]: syz.2.326 (pid 7170) Use of struct sctp_assoc_value in delayed_ack socket option. [ 126.169632][ T7170] Use struct sctp_sack_info instead [ 126.493196][ T7153] netlink: 8 bytes leftover after parsing attributes in process `syz.0.324'. [ 126.664247][ T7186] syz.1.328 (7186) used obsolete PPPIOCDETACH ioctl [ 127.320531][ T7211] FAULT_INJECTION: forcing a failure. [ 127.320531][ T7211] name failslab, interval 1, probability 0, space 0, times 0 [ 127.394786][ T7211] CPU: 1 UID: 0 PID: 7211 Comm: syz.0.334 Not tainted syzkaller #0 PREEMPT(full) [ 127.394816][ T7211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 127.394829][ T7211] Call Trace: [ 127.394837][ T7211] [ 127.394845][ T7211] dump_stack_lvl+0x189/0x250 [ 127.394881][ T7211] ? __pfx____ratelimit+0x10/0x10 [ 127.394916][ T7211] ? __pfx_dump_stack_lvl+0x10/0x10 [ 127.394944][ T7211] ? __pfx__printk+0x10/0x10 [ 127.394973][ T7211] ? __lock_acquire+0xab9/0xd20 [ 127.395003][ T7211] should_fail_ex+0x414/0x560 [ 127.395041][ T7211] should_failslab+0xa8/0x100 [ 127.395065][ T7211] kmem_cache_alloc_noprof+0x74/0x6e0 [ 127.395096][ T7211] ? skb_clone+0x212/0x3a0 [ 127.395129][ T7211] skb_clone+0x212/0x3a0 [ 127.395159][ T7211] __netlink_deliver_tap+0x404/0x850 [ 127.395197][ T7211] ? netlink_deliver_tap+0x2e/0x1b0 [ 127.395223][ T7211] netlink_deliver_tap+0x19c/0x1b0 [ 127.395248][ T7211] netlink_unicast+0x7fa/0x9e0 [ 127.395298][ T7211] ? __pfx_netlink_unicast+0x10/0x10 [ 127.395334][ T7211] ? netlink_sendmsg+0x642/0xb30 [ 127.395355][ T7211] ? skb_put+0x11b/0x210 [ 127.395381][ T7211] netlink_sendmsg+0x805/0xb30 [ 127.395416][ T7211] ? __pfx_netlink_sendmsg+0x10/0x10 [ 127.395444][ T7211] ? aa_sock_msg_perm+0xf1/0x1d0 [ 127.395477][ T7211] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 127.395499][ T7211] ? __pfx_netlink_sendmsg+0x10/0x10 [ 127.395523][ T7211] __sock_sendmsg+0x21c/0x270 [ 127.395557][ T7211] ____sys_sendmsg+0x52d/0x830 [ 127.395589][ T7211] ? __pfx_____sys_sendmsg+0x10/0x10 [ 127.395625][ T7211] ? import_iovec+0x74/0xa0 [ 127.395657][ T7211] ___sys_sendmsg+0x21f/0x2a0 [ 127.395691][ T7211] ? __pfx____sys_sendmsg+0x10/0x10 [ 127.395780][ T7211] ? __might_fault+0xb0/0x130 [ 127.395833][ T7211] __sys_sendmmsg+0x227/0x430 [ 127.395878][ T7211] ? __pfx___sys_sendmmsg+0x10/0x10 [ 127.395918][ T7211] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 127.395963][ T7211] ? ksys_write+0x22a/0x250 [ 127.395996][ T7211] ? __pfx_ksys_write+0x10/0x10 [ 127.396031][ T7211] __x64_sys_sendmmsg+0xa0/0xc0 [ 127.396058][ T7211] do_syscall_64+0xfa/0xfa0 [ 127.396077][ T7211] ? lockdep_hardirqs_on+0x9c/0x150 [ 127.396097][ T7211] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.396116][ T7211] ? clear_bhb_loop+0x60/0xb0 [ 127.396142][ T7211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.396162][ T7211] RIP: 0033:0x7fa561f8f6c9 [ 127.396180][ T7211] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.396197][ T7211] RSP: 002b:00007fa562d96038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 127.396218][ T7211] RAX: ffffffffffffffda RBX: 00007fa5621e6090 RCX: 00007fa561f8f6c9 [ 127.396233][ T7211] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000005 [ 127.396246][ T7211] RBP: 00007fa562d96090 R08: 0000000000000000 R09: 0000000000000000 [ 127.396258][ T7211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 127.396270][ T7211] R13: 00007fa5621e6128 R14: 00007fa5621e6090 R15: 00007fffa619b908 [ 127.396306][ T7211] [ 127.909822][ T7228] netlink: 12 bytes leftover after parsing attributes in process `syz.4.340'. [ 128.062241][ T7233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.339'. [ 128.111151][ T7233] gretap0: entered promiscuous mode [ 128.166822][ T7248] syz_tun: entered allmulticast mode [ 128.460454][ T7253] dummy0: entered promiscuous mode [ 128.654243][ T7222] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 128.670952][ T7230] syz_tun: left allmulticast mode [ 128.822056][ T7261] sctp: [Deprecated]: syz.0.345 (pid 7261) Use of struct sctp_assoc_value in delayed_ack socket option. [ 128.822056][ T7261] Use struct sctp_sack_info instead [ 128.902064][ T7268] FAULT_INJECTION: forcing a failure. [ 128.902064][ T7268] name failslab, interval 1, probability 0, space 0, times 0 [ 128.914984][ T7268] CPU: 1 UID: 0 PID: 7268 Comm: syz.2.346 Not tainted syzkaller #0 PREEMPT(full) [ 128.915010][ T7268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 128.915022][ T7268] Call Trace: [ 128.915031][ T7268] [ 128.915039][ T7268] dump_stack_lvl+0x189/0x250 [ 128.915073][ T7268] ? __pfx____ratelimit+0x10/0x10 [ 128.915105][ T7268] ? __pfx_dump_stack_lvl+0x10/0x10 [ 128.915133][ T7268] ? __pfx__printk+0x10/0x10 [ 128.915151][ T7268] ? skb_network_protocol+0x508/0x760 [ 128.915183][ T7268] ? __pfx_skb_network_protocol+0x10/0x10 [ 128.915214][ T7268] should_fail_ex+0x414/0x560 [ 128.915251][ T7268] should_failslab+0xa8/0x100 [ 128.915275][ T7268] kmem_cache_alloc_noprof+0x74/0x6e0 [ 128.915302][ T7268] ? dev_queue_xmit_nit+0x2d/0xad0 [ 128.915323][ T7268] ? skb_clone+0x212/0x3a0 [ 128.915347][ T7268] ? __pfx_validate_xmit_xfrm+0x10/0x10 [ 128.915377][ T7268] skb_clone+0x212/0x3a0 [ 128.915399][ T7268] ? dev_queue_xmit_nit+0x27d/0xad0 [ 128.915424][ T7268] dev_queue_xmit_nit+0x29a/0xad0 [ 128.915443][ T7268] ? rcu_read_lock_bh_held+0x79/0xe0 [ 128.915469][ T7268] ? dev_queue_xmit_nit+0x2d/0xad0 [ 128.915502][ T7268] dev_hard_start_xmit+0x1be/0x830 [ 128.915555][ T7268] __dev_queue_xmit+0x172a/0x3740 [ 128.915600][ T7268] ? __dev_queue_xmit+0x284/0x3740 [ 128.915639][ T7268] ? __pfx___dev_queue_xmit+0x10/0x10 [ 128.915663][ T7268] ? _copy_from_iter+0x24f/0x1790 [ 128.915687][ T7268] ? skb_set_owner_w+0x26c/0x3e0 [ 128.915715][ T7268] ? sock_alloc_send_pskb+0x86b/0x980 [ 128.915750][ T7268] ? packet_parse_headers+0x7ff/0xb60 [ 128.915777][ T7268] ? packet_parse_headers+0x8b8/0xb60 [ 128.915810][ T7268] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 128.915837][ T7268] ? __pfx_packet_parse_headers+0x10/0x10 [ 128.915863][ T7268] ? skb_copy_datagram_from_iter+0x60c/0x720 [ 128.915895][ T7268] ? packet_xmit+0x68/0x330 [ 128.915925][ T7268] packet_sendmsg+0x3e33/0x5080 [ 128.915957][ T7268] ? aa_new_mount+0x360/0x810 [ 128.916008][ T7268] ? __pfx___might_resched+0x10/0x10 [ 128.916030][ T7268] ? __lock_acquire+0xab9/0xd20 [ 128.916067][ T7268] ? __pfx_packet_sendmsg+0x10/0x10 [ 128.916085][ T7268] ? aa_sk_perm+0x81e/0x950 [ 128.916120][ T7268] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 128.916161][ T7268] ? aa_sock_msg_perm+0xf1/0x1d0 [ 128.916194][ T7268] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 128.916214][ T7268] ? __pfx_packet_sendmsg+0x10/0x10 [ 128.916236][ T7268] __sock_sendmsg+0x21c/0x270 [ 128.916268][ T7268] __sys_sendto+0x3bd/0x520 [ 128.916292][ T7268] ? __pfx___sys_sendto+0x10/0x10 [ 128.916310][ T7268] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 128.916347][ T7268] ? __fget_files+0x3a0/0x420 [ 128.916380][ T7268] ? ksys_write+0x22a/0x250 [ 128.916412][ T7268] ? __pfx_ksys_write+0x10/0x10 [ 128.916445][ T7268] __x64_sys_sendto+0xde/0x100 [ 128.916471][ T7268] do_syscall_64+0xfa/0xfa0 [ 128.916490][ T7268] ? lockdep_hardirqs_on+0x9c/0x150 [ 128.916510][ T7268] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.916529][ T7268] ? clear_bhb_loop+0x60/0xb0 [ 128.916560][ T7268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.916579][ T7268] RIP: 0033:0x7f2ed7d8f6c9 [ 128.916598][ T7268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.916614][ T7268] RSP: 002b:00007f2ed8c04038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 128.916635][ T7268] RAX: ffffffffffffffda RBX: 00007f2ed7fe5fa0 RCX: 00007f2ed7d8f6c9 [ 128.916650][ T7268] RDX: 000000000000000e RSI: 00002000000000c0 RDI: 0000000000000005 [ 128.916662][ T7268] RBP: 00007f2ed8c04090 R08: 0000200000000540 R09: 0000000000000014 [ 128.916675][ T7268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.916686][ T7268] R13: 00007f2ed7fe6038 R14: 00007f2ed7fe5fa0 R15: 00007ffcf0b49d98 [ 128.916721][ T7268] [ 130.017967][ T7302] netlink: 12 bytes leftover after parsing attributes in process `syz.2.352'. [ 130.286673][ T7311] Unsupported ieee802154 address type: 0 [ 130.306356][ T7312] syzkaller0: entered promiscuous mode [ 130.329542][ T7312] syzkaller0: entered allmulticast mode [ 131.002140][ T5147] Bluetooth: hci4: link tx timeout [ 131.009125][ T5147] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 131.019746][ T5835] Bluetooth: hci4: link tx timeout [ 131.028989][ T5835] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 131.290305][ T7353] syzkaller0: entered promiscuous mode [ 131.299567][ T7353] syzkaller0: entered allmulticast mode [ 131.823125][ T7385] netlink: 4 bytes leftover after parsing attributes in process `syz.4.369'. [ 131.961612][ T7395] netlink: 4 bytes leftover after parsing attributes in process `syz.2.371'. [ 132.091091][ T7400] IPVS: set_ctl: invalid protocol: 98 224.0.0.2:20004 [ 132.426785][ T5835] Bluetooth: hci4: link tx timeout [ 132.432275][ T5835] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 132.441896][ T5835] Bluetooth: hci4: link tx timeout [ 132.458732][ T5835] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 133.100201][ T5147] Bluetooth: hci4: command 0x0406 tx timeout [ 133.719396][ T7385] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.729411][ T7385] bridge_slave_0: left allmulticast mode [ 133.735478][ T7385] bridge_slave_0: left promiscuous mode [ 133.741667][ T7385] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.851129][ T7389] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 134.068314][ T7426] netlink: 'syz.1.376': attribute type 1 has an invalid length. [ 134.238977][ T7426] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 134.818510][ T7468] netlink: 8 bytes leftover after parsing attributes in process `syz.1.388'. [ 135.002144][ T7473] netlink: 8 bytes leftover after parsing attributes in process `syz.1.388'. [ 135.072247][ T7473] netlink: 4 bytes leftover after parsing attributes in process `syz.1.388'. [ 135.356478][ T7487] netlink: 20 bytes leftover after parsing attributes in process `syz.4.390'. [ 135.816972][ T7499] netlink: 8 bytes leftover after parsing attributes in process `syz.4.394'. [ 135.843214][ T7468] xt_hashlimit: size too large, truncated to 1048576 [ 135.850857][ T7468] xt_hashlimit: max too large, truncated to 1048576 [ 135.965164][ T7468] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 136.064034][ T7507] netlink: 104 bytes leftover after parsing attributes in process `syz.2.396'. [ 136.116775][ T7514] netlink: 8 bytes leftover after parsing attributes in process `syz.3.397'. [ 136.147056][ T7514] netlink: 'syz.3.397': attribute type 39 has an invalid length. [ 136.434552][ T7520] syzkaller0: entered promiscuous mode [ 136.470909][ T7520] syzkaller0: entered allmulticast mode [ 136.546233][ T7528] netlink: 'syz.4.400': attribute type 15 has an invalid length. [ 136.549243][ T7520] xt_hashlimit: overflow, try lower: 3/0 [ 136.589977][ T7528] netlink: 24 bytes leftover after parsing attributes in process `syz.4.400'. [ 136.904451][ T7523] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.186658][ T7542] sctp: [Deprecated]: syz.1.402 (pid 7542) Use of struct sctp_assoc_value in delayed_ack socket option. [ 137.186658][ T7542] Use struct sctp_sack_info instead [ 137.340656][ T7523] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.580651][ T7523] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.974372][ T7523] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.007005][ T7568] netlink: 20 bytes leftover after parsing attributes in process `syz.2.407'. [ 138.046825][ T6271] wlan1: Trigger new scan to find an IBSS to join [ 138.131265][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.138096][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.283432][ T7577] netlink: 76 bytes leftover after parsing attributes in process `syz.0.408'. [ 138.453117][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.479749][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.584114][ T60] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.630599][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.851392][ T7610] netlink: 'syz.4.419': attribute type 13 has an invalid length. [ 138.859680][ T7610] netlink: 'syz.4.419': attribute type 17 has an invalid length. [ 139.057286][ T7610] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 139.083690][ T7621] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 140.271397][ T7646] dvmrp6: left allmulticast mode [ 140.295182][ T7652] atomic_op ffff88807883c998 conn xmit_atomic 0000000000000000 [ 140.428458][ T7648] lo speed is unknown, defaulting to 1000 [ 140.500907][ T7648] lo speed is unknown, defaulting to 1000 [ 140.525175][ T7648] lo speed is unknown, defaulting to 1000 [ 140.644548][ T7660] netlink: 'syz.0.431': attribute type 1 has an invalid length. [ 140.716712][ T7665] __nla_validate_parse: 1 callbacks suppressed [ 140.716732][ T7665] netlink: 28 bytes leftover after parsing attributes in process `syz.0.431'. [ 140.748486][ T7660] bond3: entered promiscuous mode [ 140.756519][ T7660] 8021q: adding VLAN 0 to HW filter on device bond3 [ 140.767709][ T7665] bond3: entered allmulticast mode [ 140.921938][ T7660] bond3: (slave bridge1): making interface the new active one [ 140.949961][ T7660] bridge1: entered promiscuous mode [ 140.961484][ T7660] bridge1: entered allmulticast mode [ 140.970827][ T7660] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 141.008855][ T60] wlan1: Trigger new scan to find an IBSS to join [ 141.267796][ T7673] netlink: 24 bytes leftover after parsing attributes in process `syz.3.435'. [ 141.334557][ T7648] infiniband syz0: set active [ 141.364774][ T7648] infiniband syz0: added lo [ 141.376436][ T7648] syz0: rxe_create_cq: returned err = -12 [ 141.382789][ T7648] infiniband syz0: Couldn't create ib_mad CQ [ 141.393202][ T7648] infiniband syz0: Couldn't open port 1 [ 141.400411][ T5916] lo speed is unknown, defaulting to 1000 [ 141.415867][ T7675] netlink: 20 bytes leftover after parsing attributes in process `syz.2.436'. [ 141.508445][ T5961] IPVS: starting estimator thread 0... [ 141.562321][ T7648] RDS/IB: syz0: added [ 141.579761][ T7648] smc: adding ib device syz0 with port count 1 [ 141.600295][ T7648] smc: ib device syz0 port 1 has no pnetid [ 141.615568][ T7684] IPVS: using max 24 ests per chain, 57600 per kthread [ 141.619220][ T5916] lo speed is unknown, defaulting to 1000 [ 141.635909][ T7648] lo speed is unknown, defaulting to 1000 [ 141.873512][ T7701] netlink: 'syz.2.442': attribute type 10 has an invalid length. [ 141.915550][ T7701] veth0_vlan: entered allmulticast mode [ 141.979804][ T6272] wlan1: Creating new IBSS network, BSSID 2a:86:ce:77:25:92 [ 142.078433][ T7701] veth0_vlan: left promiscuous mode [ 142.086597][ T7701] veth0_vlan: entered promiscuous mode [ 142.099849][ T7701] team0: Device veth0_vlan failed to register rx_handler [ 142.275438][ T7714] netlink: 240 bytes leftover after parsing attributes in process `syz.3.443'. [ 142.325686][ T7714] netlink: 48 bytes leftover after parsing attributes in process `syz.3.443'. [ 143.756143][ T7723] bond0: Error: Cannot enslave bond to itself. [ 143.763343][ T7648] lo speed is unknown, defaulting to 1000 [ 143.777772][ T7727] @0Ù: renamed from bond_slave_1 (while UP) [ 144.341665][ T7648] lo speed is unknown, defaulting to 1000 [ 144.908162][ T7726] lo speed is unknown, defaulting to 1000 [ 145.183000][ T7736] lo speed is unknown, defaulting to 1000 [ 145.600399][ T7648] lo speed is unknown, defaulting to 1000 [ 145.729247][ T7768] netlink: 44 bytes leftover after parsing attributes in process `syz.2.456'. [ 145.749352][ T7768] netlink: 43 bytes leftover after parsing attributes in process `syz.2.456'. [ 145.775946][ T7768] netlink: 'syz.2.456': attribute type 5 has an invalid length. [ 145.802618][ T7768] netlink: 43 bytes leftover after parsing attributes in process `syz.2.456'. [ 145.850802][ T7771] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.960172][ T7778] netlink: 'syz.2.458': attribute type 9 has an invalid length. [ 146.009357][ T7771] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.072574][ T7771] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.163619][ T7771] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.186754][ T7648] lo speed is unknown, defaulting to 1000 [ 146.255870][ T7786] batadv1: entered promiscuous mode [ 146.306887][ T7787] netlink: 68 bytes leftover after parsing attributes in process `syz.2.461'. [ 146.309938][ T1166] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.399127][ T1166] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.404436][ T7788] netlink: 32 bytes leftover after parsing attributes in process `syz.2.461'. [ 146.417137][ T1166] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.417183][ T1166] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.782157][ T7648] lo speed is unknown, defaulting to 1000 [ 147.220347][ T7810] batadv0: left allmulticast mode [ 147.240819][ T7810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.339943][ T7812] Bluetooth: MGMT ver 1.23 [ 147.350233][ T7810] netlink: 'syz.3.467': attribute type 2 has an invalid length. [ 147.979085][ T7817] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 148.001885][ T7817] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 148.290980][ T7827] unsupported nla_type 52263 [ 148.671478][ T7836] sctp: [Deprecated]: syz.0.475 (pid 7836) Use of struct sctp_assoc_value in delayed_ack socket option. [ 148.671478][ T7836] Use struct sctp_sack_info instead [ 148.769543][ T7841] lo speed is unknown, defaulting to 1000 [ 148.816333][ T7846] netlink: 'syz.3.476': attribute type 12 has an invalid length. [ 149.202882][ T30] audit: type=1804 audit(1763506052.358:6): pid=7849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.478" name="/newroot/100/memory.events" dev="tmpfs" ino=524 res=1 errno=0 [ 149.262826][ T30] audit: type=1800 audit(1763506052.398:7): pid=7849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.478" name="memory.events" dev="tmpfs" ino=524 res=0 errno=0 [ 149.906099][ T7859] lo speed is unknown, defaulting to 1000 [ 149.948665][ T7870] netlink: 8 bytes leftover after parsing attributes in process `syz.4.483'. [ 149.981942][ T7870] batadv0: entered promiscuous mode [ 149.993539][ T7870] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 150.003871][ T7870] batadv0: left promiscuous mode [ 150.464535][ T7879] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 150.637593][ T7885] netlink: 'syz.4.486': attribute type 10 has an invalid length. [ 150.737894][ T7882] bond0: (slave bond_slave_0): Releasing backup interface [ 150.848815][ T7882] bond0: (slave bond_slave_1): Releasing backup interface [ 150.914800][ T7882] team0: Port device team_slave_0 removed [ 150.968161][ T7882] team0: Port device team_slave_1 removed [ 150.999122][ T7882] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.009561][ T7882] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 151.028135][ T7882] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.035938][ T7882] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.046749][ T7882] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 151.115204][ T7873] netlink: 32 bytes leftover after parsing attributes in process `syz.2.484'. [ 151.137279][ T7885] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 151.301790][ T30] audit: type=1804 audit(1763506054.448:8): pid=7905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.492" name="/newroot/103/memory.events" dev="tmpfs" ino=540 res=1 errno=0 [ 151.368680][ T30] audit: type=1800 audit(1763506054.448:9): pid=7905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.492" name="memory.events" dev="tmpfs" ino=540 res=0 errno=0 [ 151.724903][ T7921] tipc: Started in network mode [ 151.754790][ T7921] tipc: Node identity 1a5067687a77, cluster identity 4711 [ 151.835346][ T7921] tipc: Enabled bearer , priority 0 [ 151.894918][ T7921] tipc: Resetting bearer [ 152.003797][ T7922] syzkaller0: entered promiscuous mode [ 152.041281][ T7920] tipc: Resetting bearer [ 152.101210][ T7920] tipc: Disabling bearer [ 152.240538][ T7929] xt_hashlimit: invalid interval [ 152.446094][ T7943] syzkaller0: entered promiscuous mode [ 152.451861][ T7943] syzkaller0: entered allmulticast mode [ 152.739550][ T30] audit: type=1804 audit(1763506055.898:10): pid=7958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.506" name="/newroot/92/memory.events" dev="tmpfs" ino=496 res=1 errno=0 [ 152.806334][ T30] audit: type=1800 audit(1763506055.898:11): pid=7958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.506" name="memory.events" dev="tmpfs" ino=496 res=0 errno=0 [ 152.928935][ T7965] tipc: Enabled bearer , priority 0 [ 152.948478][ T7967] syzkaller0: entered promiscuous mode [ 152.958691][ T7967] syzkaller0: entered allmulticast mode [ 152.980534][ T7965] tipc: Enabling of bearer rejected, already enabled [ 153.041533][ T7965] tipc: Enabling of bearer rejected, already enabled [ 153.062192][ T7965] tipc: Enabling of bearer rejected, already enabled [ 153.096896][ T7965] tipc: Enabling of bearer rejected, already enabled [ 153.143713][ T7965] tipc: Enabling of bearer rejected, already enabled [ 153.163224][ T7965] tipc: Enabling of bearer rejected, already enabled [ 153.185566][ T7965] tipc: Enabling of bearer rejected, already enabled [ 153.194517][ T7965] tipc: Enabling of bearer rejected, already enabled [ 153.223865][ T7965] tipc: Enabling of bearer rejected, already enabled [ 153.279402][ T7965] tipc: Enabling of bearer rejected, already enabled [ 153.298393][ T7965] tipc: Enabling of bearer rejected, already enabled [ 153.354220][ T7965] tipc: Enabling of bearer rejected, already enabled [ 153.410818][ T7965] tipc: Enabling of bearer rejected, already enabled [ 153.420152][ T7983] veth0: entered promiscuous mode [ 153.435432][ T7985] netlink: 'syz.0.514': attribute type 3 has an invalid length. [ 153.447067][ T7965] tipc: Enabling of bearer rejected, already enabled [ 153.459204][ T7985] netlink: 4 bytes leftover after parsing attributes in process `syz.0.514'. [ 153.490725][ T7965] tipc: Enabling of bearer rejected, already enabled [ 153.511381][ T7987] veth0: left promiscuous mode [ 153.525614][ T7965] tipc: Enabling of bearer rejected, already enabled [ 153.607699][ T7965] tipc: Enabling of bearer rejected, already enabled [ 153.627064][ T7983] Bluetooth: MGMT ver 1.23 [ 153.636379][ T7965] tipc: Enabling of bearer rejected, already enabled [ 153.684586][ T7965] tipc: Enabling of bearer rejected, already enabled [ 153.729961][ T7963] tipc: Resetting bearer [ 153.801068][ T7963] tipc: Disabling bearer [ 153.832919][ T7996] netlink: 12 bytes leftover after parsing attributes in process `syz.0.518'. [ 153.958905][ T8003] IPv6: Can't replace route, no match found [ 153.973018][ T7998] netlink: 184 bytes leftover after parsing attributes in process `syz.2.519'. [ 154.044508][ T8003] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.215473][ T8019] netlink: 64 bytes leftover after parsing attributes in process `syz.3.520'. [ 154.287271][ T8016] batman_adv: batadv0: Adding interface: macsec1 [ 154.304574][ T8016] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 154.332467][ T8023] netlink: 'syz.2.526': attribute type 3 has an invalid length. [ 154.340873][ T8023] netlink: 4 bytes leftover after parsing attributes in process `syz.2.526'. [ 154.350587][ T8016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.362771][ T8016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.380798][ T8016] batman_adv: batadv0: Interface activated: macsec1 [ 154.508651][ T8003] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.590769][ T8030] netlink: 8 bytes leftover after parsing attributes in process `syz.3.529'. [ 154.698504][ T8035] netlink: 12 bytes leftover after parsing attributes in process `syz.2.530'. [ 155.232324][ T8003] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.280994][ T8044] netlink: 8 bytes leftover after parsing attributes in process `syz.3.532'. [ 155.380684][ T8003] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.642856][ T1166] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.669758][ T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.694541][ T8048] netlink: 184 bytes leftover after parsing attributes in process `syz.0.534'. [ 155.720167][ T6272] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.729520][ T8056] netlink: 'syz.3.538': attribute type 3 has an invalid length. [ 155.772855][ T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.040569][ T8065] lo speed is unknown, defaulting to 1000 [ 156.905700][ T8094] lo speed is unknown, defaulting to 1000 [ 157.780019][ T8111] lo speed is unknown, defaulting to 1000 [ 157.945580][ T8121] __nla_validate_parse: 1 callbacks suppressed [ 157.945605][ T8121] netlink: 184 bytes leftover after parsing attributes in process `syz.1.551'. [ 158.074841][ T8128] netlink: 'syz.4.553': attribute type 12 has an invalid length. [ 160.230161][ T8148] tap0: tun_chr_ioctl cmd 1074025677 [ 160.236424][ T8148] tap0: linktype set to 825 [ 160.610542][ T8173] netlink: 20 bytes leftover after parsing attributes in process `syz.3.562'. [ 160.654439][ T8173] netlink: 20 bytes leftover after parsing attributes in process `syz.3.562'. [ 160.854885][ T8184] ip6tnl2: entered promiscuous mode [ 160.886332][ T8184] ip6tnl2: entered allmulticast mode [ 160.960407][ T8181] lo speed is unknown, defaulting to 1000 [ 161.377621][ T8197] tipc: Enabled bearer , priority 0 [ 161.406490][ T8197] syzkaller0: entered promiscuous mode [ 161.412044][ T8197] syzkaller0: entered allmulticast mode [ 161.618140][ T8203] netlink: 44 bytes leftover after parsing attributes in process `syz.3.571'. [ 161.627268][ T8203] netlink: 12 bytes leftover after parsing attributes in process `syz.3.571'. [ 161.644265][ T8206] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 161.667099][ T8206] Cannot find add_set index 0 as target [ 161.694729][ T8197] tipc: Failed to remove unknown binding: 66,1,1/0:2217599063/2217599065 [ 161.707018][ T8197] tipc: Failed to remove unknown binding: 66,1,1/0:2217599063/2217599065 [ 161.812745][ T8201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.841265][ T8201] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 161.919830][ T8201] bond0: (slave sit0): Error -95 calling set_mac_address [ 162.036972][ T8214] tipc: Resetting bearer [ 162.064718][ T8196] tipc: Resetting bearer [ 162.114006][ T8196] tipc: Disabling bearer [ 162.241448][ T8231] netlink: 32 bytes leftover after parsing attributes in process `syz.3.573'. [ 162.367451][ T8237] netlink: 36 bytes leftover after parsing attributes in process `syz.1.570'. [ 162.407836][ T8235] lo speed is unknown, defaulting to 1000 [ 162.634171][ T8249] sctp: [Deprecated]: syz.3.575 (pid 8249) Use of struct sctp_assoc_value in delayed_ack socket option. [ 162.634171][ T8249] Use struct sctp_sack_info instead [ 163.112573][ T8248] lo speed is unknown, defaulting to 1000 [ 164.188481][ T8283] ------------[ cut here ]------------ [ 164.194503][ T8283] WARNING: CPU: 1 PID: 8283 at net/ipv4/route.c:1275 ip_rt_bug+0x2c/0x110 [ 164.203915][ T8283] Modules linked in: [ 164.208351][ T8283] CPU: 1 UID: 0 PID: 8283 Comm: syz.0.581 Not tainted syzkaller #0 PREEMPT(full) [ 164.217914][ T8283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 164.228367][ T8283] RIP: 0010:ip_rt_bug+0x2c/0x110 [ 164.233628][ T8283] Code: 1e fa 41 57 41 56 41 55 41 54 53 48 89 d3 e8 9b d2 0e f8 66 90 e8 94 d2 0e f8 31 ff 48 89 de ba 02 00 00 00 e8 25 c3 6e ff 90 <0f> 0b 90 31 c0 5b 41 5c 41 5d 41 5e 41 5f e9 41 d3 98 01 cc f3 0f [ 164.253642][ T8283] RSP: 0018:ffffc9000378f180 EFLAGS: 00010286 [ 164.259890][ T8283] RAX: 03e383b614fa8800 RBX: ffff8880797103c0 RCX: 03e383b614fa8800 [ 164.268213][ T8283] RDX: 0000000000000002 RSI: ffffffff8d710347 RDI: ffffffff8bbf0760 [ 164.276455][ T8283] RBP: 0000000000000001 R08: ffffffff8f7cfe77 R09: 1ffffffff1ef9fce [ 164.285143][ T8283] R10: dffffc0000000000 R11: fffffbfff1ef9fcf R12: dffffc0000000000 [ 164.293865][ T8283] R13: dffffc0000000000 R14: ffff8880797103c0 R15: ffff888145e92580 [ 164.302208][ T8283] FS: 00007fa562db76c0(0000) GS:ffff888126238000(0000) knlGS:0000000000000000 [ 164.307480][ T8285] netlink: 12 bytes leftover after parsing attributes in process `syz.2.582'. [ 164.311448][ T8283] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 164.311510][ T8283] CR2: 000000110c2a228e CR3: 000000002894e000 CR4: 00000000003526f0 [ 164.335644][ T8283] Call Trace: [ 164.339139][ T8283] [ 164.342121][ T8283] ip_push_pending_frames+0xbe/0x150 [ 164.347709][ T8283] __icmp_send+0x101e/0x13c0 [ 164.352461][ T8283] ? __icmp_send+0x1b9/0x13c0 [ 164.357593][ T8283] ? __pfx___icmp_send+0x10/0x10 [ 164.362800][ T8283] ? ip_route_input_noref+0x98/0x250 [ 164.368567][ T8283] ? __pfx_ip_route_input_noref+0x10/0x10 [ 164.374678][ T8283] ? tcp_v4_early_demux+0x4b3/0x9a0 [ 164.379946][ T8283] ip_options_compile+0x80/0xb0 [ 164.384922][ T8283] ip_rcv_finish_core+0xaa2/0x1c00 [ 164.390371][ T8283] ip_rcv_finish+0x14c/0x2f0 [ 164.395092][ T8283] NF_HOOK+0x30c/0x3a0 [ 164.399246][ T8283] ? __pfx_ip_rcv_finish+0x10/0x10 [ 164.404730][ T8283] ? NF_HOOK+0x9a/0x3a0 [ 164.409048][ T8283] ? __pfx_NF_HOOK+0x10/0x10 [ 164.413849][ T8283] ? ip_rcv_core+0x7f7/0xd00 [ 164.419066][ T8283] ? __pfx_ip_rcv_finish+0x10/0x10 [ 164.424350][ T8283] ? __pfx_ip_rcv+0x10/0x10 [ 164.429040][ T8283] __netif_receive_skb+0x143/0x380 [ 164.434349][ T8283] ? netif_receive_skb+0x115/0x790 [ 164.439824][ T8283] netif_receive_skb+0x1cb/0x790 [ 164.445045][ T8283] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 164.451348][ T8283] ? __pfx_netif_receive_skb+0x10/0x10 [ 164.457207][ T8283] ? tun_rx_batched+0x160/0x730 [ 164.462131][ T8283] tun_rx_batched+0x1b9/0x730 [ 164.466926][ T8283] ? __lock_acquire+0xab9/0xd20 [ 164.471865][ T8283] ? __pfx_tun_rx_batched+0x10/0x10 [ 164.477173][ T8283] ? tun_get_user+0x272f/0x3e90 [ 164.482452][ T8283] tun_get_user+0x2b65/0x3e90 [ 164.487255][ T8283] ? tun_get_user+0x6f6/0x3e90 [ 164.492355][ T8283] ? tun_get_user+0x272f/0x3e90 [ 164.497800][ T8283] ? aa_file_perm+0x44d/0x1550 [ 164.502803][ T8283] ? __pfx_tun_get_user+0x10/0x10 [ 164.508038][ T8283] ? __futex_wait+0x34a/0x3d0 [ 164.513918][ T8283] ? __pfx___futex_wait+0x10/0x10 [ 164.519324][ T8283] ? ref_tracker_alloc+0x318/0x460 [ 164.524498][ T8283] ? __lock_acquire+0xab9/0xd20 [ 164.529549][ T8283] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 164.535378][ T8283] ? tun_get+0x1c/0x2f0 [ 164.540238][ T8283] ? tun_get+0x1c/0x2f0 [ 164.545024][ T8283] ? tun_get+0x1c/0x2f0 [ 164.549388][ T8283] tun_chr_write_iter+0x113/0x200 [ 164.554823][ T8283] vfs_write+0x5c9/0xb30 [ 164.559679][ T8283] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 164.565691][ T8283] ? __pfx_vfs_write+0x10/0x10 [ 164.570668][ T8283] ? __fget_files+0x2a/0x420 [ 164.573131][ T8265] lo speed is unknown, defaulting to 1000 [ 164.575456][ T8283] ksys_write+0x145/0x250 [ 164.575513][ T8283] ? __pfx_ksys_write+0x10/0x10 [ 164.575552][ T8283] ? do_syscall_64+0xbe/0xfa0 [ 164.575580][ T8283] do_syscall_64+0xfa/0xfa0 [ 164.603546][ T8283] ? lockdep_hardirqs_on+0x9c/0x150 [ 164.609765][ T8283] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.616203][ T8283] ? clear_bhb_loop+0x60/0xb0 [ 164.621050][ T8283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.627205][ T8283] RIP: 0033:0x7fa561f8e17f [ 164.632113][ T8283] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 164.652782][ T8283] RSP: 002b:00007fa562db7000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 164.661518][ T8283] RAX: ffffffffffffffda RBX: 00007fa5621e5fa0 RCX: 00007fa561f8e17f [ 164.669897][ T8283] RDX: 0000000000000046 RSI: 0000200000000400 RDI: 00000000000000c8 [ 164.678046][ T8283] RBP: 00007fa562011f91 R08: 0000000000000000 R09: 0000000000000000 [ 164.686111][ T8283] R10: 0000000000000046 R11: 0000000000000293 R12: 0000000000000000 [ 164.694310][ T8283] R13: 00007fa5621e6038 R14: 00007fa5621e5fa0 R15: 00007fffa619b908 [ 164.702713][ T8283] [ 164.706287][ T8283] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 164.713965][ T8283] CPU: 1 UID: 0 PID: 8283 Comm: syz.0.581 Not tainted syzkaller #0 PREEMPT(full) [ 164.723741][ T8283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 164.733839][ T8283] Call Trace: [ 164.737158][ T8283] [ 164.740200][ T8283] dump_stack_lvl+0x99/0x250 [ 164.744850][ T8283] ? __asan_memcpy+0x40/0x70 [ 164.749550][ T8283] ? __pfx_dump_stack_lvl+0x10/0x10 [ 164.754958][ T8283] ? __pfx__printk+0x10/0x10 [ 164.759681][ T8283] vpanic+0x237/0x6d0 [ 164.763704][ T8283] ? __pfx_vpanic+0x10/0x10 [ 164.768236][ T8283] panic+0xb9/0xc0 [ 164.772096][ T8283] ? __pfx_panic+0x10/0x10 [ 164.776551][ T8283] __warn+0x31b/0x4b0 [ 164.780563][ T8283] ? ip_rt_bug+0x2c/0x110 [ 164.784909][ T8283] ? ip_rt_bug+0x2c/0x110 [ 164.789282][ T8283] report_bug+0x2be/0x4f0 [ 164.793666][ T8283] ? ip_rt_bug+0x2c/0x110 [ 164.798031][ T8283] ? ip_rt_bug+0x2c/0x110 [ 164.802471][ T8283] ? ip_rt_bug+0x2e/0x110 [ 164.806909][ T8283] handle_bug+0x84/0x160 [ 164.811186][ T8283] exc_invalid_op+0x1a/0x50 [ 164.815719][ T8283] asm_exc_invalid_op+0x1a/0x20 [ 164.820582][ T8283] RIP: 0010:ip_rt_bug+0x2c/0x110 [ 164.825544][ T8283] Code: 1e fa 41 57 41 56 41 55 41 54 53 48 89 d3 e8 9b d2 0e f8 66 90 e8 94 d2 0e f8 31 ff 48 89 de ba 02 00 00 00 e8 25 c3 6e ff 90 <0f> 0b 90 31 c0 5b 41 5c 41 5d 41 5e 41 5f e9 41 d3 98 01 cc f3 0f [ 164.845358][ T8283] RSP: 0018:ffffc9000378f180 EFLAGS: 00010286 [ 164.851464][ T8283] RAX: 03e383b614fa8800 RBX: ffff8880797103c0 RCX: 03e383b614fa8800 [ 164.859450][ T8283] RDX: 0000000000000002 RSI: ffffffff8d710347 RDI: ffffffff8bbf0760 [ 164.867440][ T8283] RBP: 0000000000000001 R08: ffffffff8f7cfe77 R09: 1ffffffff1ef9fce [ 164.875513][ T8283] R10: dffffc0000000000 R11: fffffbfff1ef9fcf R12: dffffc0000000000 [ 164.883682][ T8283] R13: dffffc0000000000 R14: ffff8880797103c0 R15: ffff888145e92580 [ 164.891867][ T8283] ip_push_pending_frames+0xbe/0x150 [ 164.897185][ T8283] __icmp_send+0x101e/0x13c0 [ 164.901807][ T8283] ? __icmp_send+0x1b9/0x13c0 [ 164.906507][ T8283] ? __pfx___icmp_send+0x10/0x10 [ 164.911495][ T8283] ? ip_route_input_noref+0x98/0x250 [ 164.916812][ T8283] ? __pfx_ip_route_input_noref+0x10/0x10 [ 164.922585][ T8283] ? tcp_v4_early_demux+0x4b3/0x9a0 [ 164.927805][ T8283] ip_options_compile+0x80/0xb0 [ 164.932679][ T8283] ip_rcv_finish_core+0xaa2/0x1c00 [ 164.937817][ T8283] ip_rcv_finish+0x14c/0x2f0 [ 164.942434][ T8283] NF_HOOK+0x30c/0x3a0 [ 164.946549][ T8283] ? __pfx_ip_rcv_finish+0x10/0x10 [ 164.952047][ T8283] ? NF_HOOK+0x9a/0x3a0 [ 164.956303][ T8283] ? __pfx_NF_HOOK+0x10/0x10 [ 164.960944][ T8283] ? ip_rcv_core+0x7f7/0xd00 [ 164.965728][ T8283] ? __pfx_ip_rcv_finish+0x10/0x10 [ 164.970947][ T8283] ? __pfx_ip_rcv+0x10/0x10 [ 164.975510][ T8283] __netif_receive_skb+0x143/0x380 [ 164.980711][ T8283] ? netif_receive_skb+0x115/0x790 [ 164.985976][ T8283] netif_receive_skb+0x1cb/0x790 [ 164.991051][ T8283] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 164.996878][ T8283] ? __pfx_netif_receive_skb+0x10/0x10 [ 165.002454][ T8283] ? tun_rx_batched+0x160/0x730 [ 165.007334][ T8283] tun_rx_batched+0x1b9/0x730 [ 165.012233][ T8283] ? __lock_acquire+0xab9/0xd20 [ 165.017298][ T8283] ? __pfx_tun_rx_batched+0x10/0x10 [ 165.022713][ T8283] ? tun_get_user+0x272f/0x3e90 [ 165.027610][ T8283] tun_get_user+0x2b65/0x3e90 [ 165.032325][ T8283] ? tun_get_user+0x6f6/0x3e90 [ 165.037118][ T8283] ? tun_get_user+0x272f/0x3e90 [ 165.042013][ T8283] ? aa_file_perm+0x44d/0x1550 [ 165.047084][ T8283] ? __pfx_tun_get_user+0x10/0x10 [ 165.052154][ T8283] ? __futex_wait+0x34a/0x3d0 [ 165.056869][ T8283] ? __pfx___futex_wait+0x10/0x10 [ 165.062007][ T8283] ? ref_tracker_alloc+0x318/0x460 [ 165.067145][ T8283] ? __lock_acquire+0xab9/0xd20 [ 165.072047][ T8283] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 165.077623][ T8283] ? tun_get+0x1c/0x2f0 [ 165.081844][ T8283] ? tun_get+0x1c/0x2f0 [ 165.086269][ T8283] ? tun_get+0x1c/0x2f0 [ 165.090636][ T8283] tun_chr_write_iter+0x113/0x200 [ 165.095777][ T8283] vfs_write+0x5c9/0xb30 [ 165.100047][ T8283] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 165.105883][ T8283] ? __pfx_vfs_write+0x10/0x10 [ 165.110854][ T8283] ? __fget_files+0x2a/0x420 [ 165.115656][ T8283] ksys_write+0x145/0x250 [ 165.120015][ T8283] ? __pfx_ksys_write+0x10/0x10 [ 165.124894][ T8283] ? do_syscall_64+0xbe/0xfa0 [ 165.129611][ T8283] do_syscall_64+0xfa/0xfa0 [ 165.134167][ T8283] ? lockdep_hardirqs_on+0x9c/0x150 [ 165.139380][ T8283] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.145808][ T8283] ? clear_bhb_loop+0x60/0xb0 [ 165.150505][ T8283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.156408][ T8283] RIP: 0033:0x7fa561f8e17f [ 165.160849][ T8283] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 165.181001][ T8283] RSP: 002b:00007fa562db7000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 165.189710][ T8283] RAX: ffffffffffffffda RBX: 00007fa5621e5fa0 RCX: 00007fa561f8e17f [ 165.197719][ T8283] RDX: 0000000000000046 RSI: 0000200000000400 RDI: 00000000000000c8 [ 165.205720][ T8283] RBP: 00007fa562011f91 R08: 0000000000000000 R09: 0000000000000000 [ 165.214006][ T8283] R10: 0000000000000046 R11: 0000000000000293 R12: 0000000000000000 [ 165.222035][ T8283] R13: 00007fa5621e6038 R14: 00007fa5621e5fa0 R15: 00007fffa619b908 [ 165.230311][ T8283] [ 165.233968][ T8283] Kernel Offset: disabled [ 165.238488][ T8283] Rebooting in 86400 seconds..